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Data Snafus 


Spur IT Action 


Tape Mishap Prompts 
Calls for Disk Backups 


| Bolster Online Security 





BY LUCAS MEARIAN 
Bank of America Corp. dis- 
closed last week that it lost 
digital tapes containing the 
credit card account records of 
1.2 million federal employees 
— including 60 U.S. senators. 
Users and analysts said the 
mishap highlights the risk of 
physically moving archived 
data to storage facilities and 
will likely feed a movement 
toward network-based disk-to- 
disk backup systems. 
The data loss, which 
occurred late last year, 
also prompted legisla- 
tors to renew calls for 
national legislation sim- 
ilar to California’s iden- 
tity theft law, which re- 
quires immediate dis- 
closure when customer 
information is compromised. 
“The world has changed 
dramatically over the last four 
years, and the more you can 
eliminate the amount of data 
being transported around, 
the more you want to do that,” 


Tape Mishap, page 61 | 
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| BY JAIKUMAR VIJAYAN 
Growing fears of identity theft 


| acerbated by the recent data 
| leaks at ChoicePoint Inc. and 
Bank of America Corp., are 
pushing companies to adopt 
new IT security tools in a bid 
to bolster consumer confi- 
| dence in online transactions. 
The latest example is 
ETrade Financial Corp.’s an- 
nouncement last week that it 
is offering high-value 
customers a token- 
based form of authenti- 
cation technology that 
can be used with pass- 
words to provide an 
additional layer of pro- 
tection for accessing 
online accounts. 
The move addresses 
concerns about data security 
by giving customers a con- 
| stantly changing password in 
addition to their static ones, 
said Joshua Levine, eTrade’s 
chief technology officer. 
“We felt that this is really 
Online Security, page 61 
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Companies Scramble to | 


and e-mail phishing scams, ex- | 


Stamping out IT complexity is a priority for many of the execs 


attending Computerworld’s Premier 100 conference. 


Future ot I) 


- F. WARREN MCFARLAN 


Gary H. Anthes 
asked a panel of 
IT visionaries for 
their long-range 
views and got an 


low-wage anymore.” 


customers.” - THORNTON MAY 


= “Data centers a decade from now will be gone.” 


= “Eventually... low-wage countries | won t be s so 
~ THOMAS MALONE 


= “Microsoft i is running out of rich, dumb 





earful. Read their 
predictions about 
outsourcing, 
utility computing 
and open-source 
software, starting 
on page 27. 


people to distrust IT.” 
- GORDON BELL 


= “I’m worried about [an] Internet meltdown that 
causes serious economic disruption and causes 











Running IT Operations Like a 
Business Not So Easy, Execs Say | 


Pioneers cite cultural 
issues, learning curves 


| covering the same thing. 

| “We started a chargeback 

system on Day One of our ser- 

| vices [organization], and it 
was miserable. We didn’t real- 
ly know what we were doing,” 


BY THOMAS HOFFMAN 
MIAMI 

Any small-business owner 
will tell you that starting and 
running a business takes a 
massive amount of work. 
Some IT executives who are 


trying to run their opera- Mee eadadlaug 


www.computerworld.com 


| tions like a business are dis- 


| said David Pelosi, an IT busi- 

| ness partner at Public Service 
Enterprise Group Inc., a di- 
versified energy holding com- 
pany. In 2001, Newark, N_J.- 
oo PSEG formed a shared- 

| services organization that in- 
cludes its IT, legal and human 

resources activities. 

| PSEG’s shared-services unit 

| has since developed a mature 

chargeback system for the IT 
services it delivers to business 
units. It has also built credi- 
bility with business users by 
benchmarking costs with ex- 

| IT Operations, page 16 
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in the Technology section: Many IT leaders, 
like the United Way’s Elaine Mitchell Norman, 
are taking a front-end approach to application 
integration by using composite interfaces as 
an alternative to full-blown EAI. Page 39 


THE FUTURE OF IT 
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EDITOR’S NOTE: 
What does the fu- 
ture hold for IT? 
To answer that 
question, we turned to some of 
the most-qualified crystal-ball 
gazers we know. Specifically, we 
asked our panel of CIOs, universi- 
ty professors, IT consultants and 
researchers about their views on 
the economics and delivery of IT 
in the future. They shared their 
visions of the changes and oppor- 
tunities ahead, as well as some of 
their worries about the industry. 
PACKAGE BEGINS ON PAGE 27. 
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AT DEADLINE 


SEC Probes Execs 
From ChoicePoint 


ChoicePoint Inc. said two of its ex- 
ecutives are being investigated by 
the U.S. Securities and Exchange 
Commission for possible stock- 
trading irregularities. The probe of 
trades by CEO Derek Smith and 
Douglas Curling, president and 
chief operating officer, is linked to 
recent disclosures that the com- 
pany sold the personal informa- 
tion of thousands of consumers to 
fraudulent businesses [QuickLink 
52719], ChoicePoint said. 


SCO to Restate 
2004 Results 


The SCO Group Inc. said it will 
restate financial results for the 
first three quarters of its 2004 
fiscal year because of accounting 
errors. The announcement comes 
as SCO fights to prevent a Nasdaq 
delisting. In December, SCO re- 
ported a net loss of $23.4 million 
for 2004, a year in which it spent 
nearly $20 million on legal fees in 
lawsuits with IBM and others. 


CA Issues Software 
Security Warning 


Computer Associates Internation- 
al Inc. and security firms are 
warning about a number of seri- 
ous security holes in software 
that manages CA product licens- 
es. The License and Client Server 
is shipped with almost every piece 
of software CA sells. The security 
holes could allow remote attack- 
ers to run malicious code on sys- 
tems that use the software. 


DOJ Renews Deal 
For WordPerfect 


The U.S. Department of Justice 
has renewed a multiyear, 50,000- 
seat deal to license the Word- 
Perfect Office 12 suite from Ot- 
tawa-based Corel Corp. The 
upgrade agreement extends a 
contract signed in 1999. The val- 
ue of the deal wasn’t released, but 
government pricing for the suite 
begins at $106 per user. 





Wells Fargo Web-enables ATMs 


Finishes five-year migration from OS/2 
to Windows on all 6,200 of its machines 





BY LUCAS MEARIAN 
ELLS Fargo & 
Co. last week 
said it has com- 
pleted a five- 
year project to Web-enable its 
6,200 ATMs in 23 states. The 
Windows-based infrastructure 
is designed to allow Wells Far- 
go to update its entire network 
remotely when it needs to do 
things like add new languages 
and enable customers to make 
envelope-free deposits. 

The San Francisco-based 
bank said it also installed more 
than 3,000 online stations in 
its 6,046 branch locations. 
The WebATM machines and 
online stations are part of a 
strategy to integrate all chan- 
nels — stores, phones, auto- 
mated teller machines and 
the Internet. 

Jonathan Velline, head of 
Wells Fargo’s ATM banking, 
said the biggest challenge was 
the amount of internal soft- 
ware development needed to 
migrate the bank’s ATM back- 
end systems from OS/2 to 
Windows. Another hurdle was 


| tightly integrating the ATM 


back-end systems with those 
of other business units, such 
as branch and online banking. 


Complete Integration 
“We want to make sure our 
ATMs are integrated with 
every other channel, so when 
I do a deposit in a [branch], 
I want to be able to go to an 
ATM immediately and see 
that deposit,” Velline said. A 
less-technical hurdle was re- 
placing all of the ATMs with 
higher-performance models. 
Bill Sentenac, a senior vice 
president of technology in 
Wells Fargo’s services divi- 
sion, said the bank used J2EE 
to develop the middleware 
layer that integrates the Win- 
dows-based ATM platform 
with its back-end systems. The 
bank uses XML to communi- 
cate between various backup 
platforms. 





Avivah Litan, an analyst at 
Gartner Inc., said ATM fraud 
will likely pick up as most 
banks move to Web-enabled 
systems, “because of the com- 
bination of stealing ATM 
numbers online and creating 
counterfeit ATM cards to use 
off-line.” The move to Win- 
dows-based systems is “not 


| great news for the security of 


the system. I’m sure there’s a 
lot of holes that will be creat- 
ed because of this,” she added. 
Sentenac said he’s con- 
cerned about the security of 
Windows, but no more so than 
he was with OS/2. He said 
Wells Fargo took all “the ratio- 
nal steps you’d take to harden 
any operating system,” such as 
closing unused ports. “The re- 
ality is, you can’t buy a new 
ATM that runs OS/2,” he said. 
Velline said 51% of the 
bank’s checking accounts are 
accessed online, and Wells Far- 
go customers are conducting 
as many transactions at ATMs 
as they do with branch tellers. 





WELLS 
ae FARGO 


WELLS FARGO claims to be the 
first bank to have fully Web- 
enabled its ATM infrastructure. 


Wells Fargo claims it is 
the first bank to have com- 
pletely Web-enabled its ATM 
infrastructure. According to 
research by Needham, Mass.- 
based TowerGroup, 30% of 
the world’s ATMs will run on 
Windows by 2006. 

Bank of America Corp. said 


Share Looks Back at 50 
Years, Continues to Evolve 


BY PATRICK THIBODEAU 
ANAHEIM, CALIF. 

AT THE SHARE user group's con- 
ference here last week, a chunk of 
big-iron history was put on display 
as part of the group's 50th an- 
niversary celebration. Display 
cases held items such as ancient 
tane spools and punch cards, 
prompting one gray-haired sys- 
tems veteran to say this about all 
the mainframe memorabilia: “It's a 
bit sad when you actually remem- 
ber them.” 

Chicago-based Share traces its 
start to a 1955 meeting of aero- 
space techies that included work- 
ers from rivals Boeing Airplane 
Co. and Lockheed Aircraft Corp., 
as the companies were known 


then. Group members began 
sharing IBM mainframe code, 
leading to the choice of the user 
group's name. 

Fifty years later, the mainframe 
remains an important part of 
Share’s focus. A hot topic among 
users at this year’s conference 


was running Linux on mainframes, 


with many attendees saying that 


MVS 


is virtually 
a 4 letter word 


Quirky items from Share’s past 


: were on display at the conference. 





last week it is also rolling 
out Web-enabled ATMs. Its 
3-year-old project has Web- 
enabled 3,500 of its 16,500 
ATMs, a spokeswoman said. 

Another benefit for Wells 
Fargo is that its newly in- 
stalled ATMs use the Triple 
Data Encryption Standard, an 
upgrade that’s now required 
by credit card companies and 
related funds-transfer net- 
works, such as MasterCard 
International Inc. and Visa 
U.S.A. Inc. The network 
providers established dead- 
lines starting last year for con- 
verting electronic funds net- 
works to Triple DES. The cur- 
rent standard, DES, has be- 
come vulnerable to hacking 
attacks as a result of increases 
in computing power. 

The total cost of replacing 
ATMs can be high. A new 
ATM can cost as much as 
$50,000; upgrades can range 
from $1,000 to $5,000, say fi- 
nancial industry analysts. 
Hardware security modules, 
which sit on transaction 
servers and process DES keys, 
can cost up to $50,000 each. 
@ 52963 


they're eyeing the open-source 
operating system as part of server 
consolidation strategies. 

Pat Carroll, an enterprise tech- 
nical architect who works on a 
mainframe at a large retailer and 
is a 30-year Share member, said 
that although many companies 
have moved applications to dis- 
tributed environments, critical 
databases often remain on main- 
frames. “There is still an interest in 
keeping your family jewels on the 
mainframe,” said Carroll. 

But Share has also branched 
out to include distributed systems 
as many of its members have 
taken on responsibilities that ex- 
tend beyond managing main- 
frames. “All the technologies have 
rolled over several times, but the 
problems have not gone away,” 
said Anne Calvori, a past presi- 
dent of Share who works as an IT 
manager at a company that she 
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Project at World Trade Center Site 
Puts Advanced Design Tools to Test 


Freedom Tower 
architects rely on 
3-D CAD, online 
collaboration apps 


BY MATT HAMBLEN 
The 1,776-foot-tall Freedom 
Tower being built on the 
World Trade Center site in 
New York is pushing the 
boundaries of architectural 
engineering because of its 
height and complex design. 
It’s also a major test case for a 
new generation of design and 
online collaboration tools for 
the construction industry. 

The tower’s designers 
are using desktop software 
from Autodesk Inc. in San 
Rafael, Calif., to render 3-D, 
animated images and to try to 
improve collaboration among 
some of the parties involved 
in the project. That isn’t 
the mainstream way of doing 
things in the construction 
industry, which still often re- 
lies on printed copies of 2-D 
drawings. 

The Freedom Tower’s 
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asked not be identified. 

Some 2,300 IT professionals 
were on hand at this year's event, 
well below the 6,000 or so atten- 
dees who showed up at one 
Share conference in the early 
1990s. But Robert Rosen, 
Share's current president and a 
CIO at the National Institutes of 
Health in Bethesda, Md., said that 
conference attendance is picking 
up slightly again and that the 
number of dues-paying members 
in the user group has remained 
stable at about 2,300 companies. 
@ 52972 
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| cornerstone was laid last July 

| 4, and precise diagrams of the 

| building’s plumbing and elec- 

| trical systems, as well as de- 
tailed floor and wall plans, are 
now being created by archi- 
tects at Skidmore, Owings & 
Merrill LLP (SOM) and struc- 
tural engineers at WSP Cantor 
Seinuk, both of which are 
based in New York. 


Adding Automation 
Angelo Arzano, a technical 
manager at SOM, said last 
week that most of the hun- 


dreds of subcontractors on the | 


Freedom Tower likely will still 
use paper drawings. But Auto- 
| desk’s computer-aided design 
(CAD) and collaboration tools 
| will help project managers 
| schedule construction phases 
| and can handle tasks such as 
| automatically calculating re- 
| quired quantities of steel and 
| concrete, Arzano said. 
“In the old days, you would 
| count the number of doors 
| needed from drawings, but 
| these tools do it for you,” he 
| said. “It takes the monotony 
| out of it. Imagine how many 


doors there are in a tall tower.” 


One SOM architect used 

| Autodesk’s Revit building in- 
formation modeling software 
to render a set of Freedom 
Tower floor plans, each with 
slight variations, in just two 
hours, said James Vandezande, 
the firm’s CAD manager. That 
would have taken about two 


weeks using older versions of 


Autodesk’s flagship AutoCAD 


| software, he noted. 


In addition to Revit, SOM 
is using Autodesk’s Buzzsaw 
Professional online collabora- 
tion service and its Architec- 


| tural Desktop design software, 
| which is built on top of Auto- 
| CAD. The firm customized the 


Autodesk products, adding 


| features that conform to its 


standard design procedures, 


| Vandezande said. 


SOM also had to upgrade 
from a 10/100 Ethernet LAN to 


| Gigabit Ethernet to handle the 
transmission of design data 


for the Freedom Tower. Van- 


| dezande said the firm is run- 


ning Autodesk’s software on 
Dell Inc. workstations with 
dual Xeon processors. 

Sharon Tan, an analyst at 
Gartner Inc. in Stamford, 
Conn., said the use of collabo- 
ration tools that give partici- 
pants in a building project 
real-time access to data is “not 


widespread.” Adoption will 
occur “bit by bit,” she predict- 
ed. “As more high-profile proj- 
ects like the Freedom Tower 
show success using these on- 
line collaboration tools, then 
others will follow.” 

Liability issues are one 
stumbling block to full online 
collaboration, said Anthony 
Delisi, IT manager at WSP 
Cantor Seinuk. The structural 
engineering firm is running 
Autodesk’s software in parallel 
with SOM, but Delisi said that 
Cantor Seinuk will use SOM’s 
online drawings only as a ref- 
erence against its own rendi- 
tions. “You are responsible for 
what you create, and you don’t 
want to use something some- 
one else has made and take it 
for granted it is absolutely 
correct,” he noted. 

Arzano said the burden of 
getting subcontractors on the 
Freedom Tower project to use 
Autodesk’s Buzzsaw service 
rests with the construction 
manager, Tishman Construc- 
tion Corp. in New York. 

Officials at Tishman didn’t 
return repeated calls seeking 


comment. @ 52927 


OM TOWER rises dramatically above the New York skyline 
in this artist's rendering of the planned building. 
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Software Eases 
Complex Design 


THE FREEDOM TOWER is a 
complex project from an archi- 
tectural standpoint, because 
the basic design calls for the 
building to twist, or torque, by 
40 degrees as it rises from the 
ground to the 1,500-foot level, 
according to officials at Skid- 
more, Owings & Merrill. 

In addition, the base of the 
tower will be shaped like a par- 
allelogram to conform with 
street layouts. As a result of the 
design, each of the building's 
70 occupied floors will have a 
different layout. Angelo Arzano, 
a technical manager at SOM, 
said Autodesk's Revit software 
has been an “invaluable” tool 
for configuring all of the floor 
plans. “It also allowed us to 
modify the floor spacing in 
one-tenth the time of using 
standard AutoCAD,” he said 

One of the purposes of the 
building’s torque is to disperse 
winds coming off the Hudson 
River. Turbines placed above 
the tower will use the wind to 
provide some electricity, and 
the turbines will be surrounded 
by steel cables meant to evoke 
the architectural theme of the 
nearby Brooklyn Bridge. 

James Vandezande, SOM’s 
CAD manager, said the firm's 
architects have used Auto- 
desk’s software to calculate 
the tension that will be placed 
on the cables and adjust the 
size of cable that's needed. 

Vandezande helped develop 
a two-day training process to 
acquaint end users with the 
new software being used as 
part of the project. He said the 
technology has prompted 
some changes in the way 
SOM's designers work with 
one another. For example, 
teams of architects now view a 
large-screen plasma monitor 
and look at 3-D drawings to 
evaluate design conflicts, in- 
stead of tacking 2-D blueprints 
to conference room walls. “The 
parties can ail look at one data- 
base, and there’s no argument” 
about the information, he said. 

- Matt Hamblen 
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Firefox, Mozilla 
Warnings Issued 
Several security vulnerabilities in 
the Firefox Web browser and the 
Mozilla Suite of software applica- 
tions have put users of the open- 
source products at risk of hacker 
attacks, the Mozilla Foundation 
said. Firefox Version 1.0.1 fixes 17 
security flaws in the popular Web 
browser. The vulnerabilities could 
allow an attacker to gain full con- 
trol of a victim’s PC. Most of the 
flaws also affect Mozilla. 


NIST Releases 
Fed IT Guidelines 


The National Institute of Stan- 
dards and Technology released its 
final version of recommended se- 
curity controls for federal informa- 
tion systems. The new guidelines 
will be the basis for a proposal to 
be made later this year by NIST for 
the Federal Information Process- 
ing Standard, or FIPS. The guide- 
lines will become mandatory for 
federal agencies in December. 


SAP Realigns 
Management Team 


SAP AG said it is realigning the 
responsibilities of its management 
team to simplify its command 
structure. The reorganization 
comes as SAP positions itself to 
better compete with Oracle Corp., 
which recently acquired People- 
Soft Inc. The realignment affects 
the responsibilities of all members 
of SAP’s executive board. 


IBM Updates 
Informix DBMS 


IBM unveiled an upgrade to its 
Informix database management 
system and plans to offer a new 
Express edition aimed at smaller 
businesses by the middle of the 
year. Informix Dynamic Server 
Version 10 includes performance, 
administration and security up- 
grades, and adds support for the 
Linux 2.6 kernel. IBM also laid out 
a road map for Informix products 
through 2010. 
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Robo Admin May 
Not Appear Soon .. . 


... but the need for IT automation technology is immediate. 
What with Framingham, Mass.-based market re- 
search firm IDC estimating that there are at least 

20 million servers and 39 million network routers 
installed worldwide, you can’t blame IT executives 
and staffers for wishing for some robotic help with 


the endless, complex 
and costly tasks of 
patching software, 
changing configura- 
tions and provision- 
ing systems. And all 
that work doesn’t 
come cheap. IDC 
says companies spent 
$95 billion last year 
maintaining just 
servers. Alas, until a robotic 
sysadmin superhero swoops 
down from the skies to save 
the day, you’ll need to rely on 
vendors like Opsware Inc. in 
Sunnyvale, Calif. According 
to Chief Technology Officer 
Tim Howes, Opsware “wants 
to be able to code the exper- 
tise in IT people’s heads.” 
Howes says that most of the 
automation tools now on the 
market come from server and 
router vendors themselves — 
which isn’t all that helpful for 
users facing IT’s heteroge- 
neous reality. “We need to 
automate for a multivendor 
world, especially for net- 
works,” Howes says. Hence 


HO 


wants to code 
your brain. 


the planned March 21 
release of Opsware’s 
Network Automation 
System 4.0. Among 
other improvements, 
the upgrade can be 
configured to report 
on security violations 
as they relate to gov- 
ernment regulations 
such as the Sarbanes- 
Oxley Act. It also manages 
network administration 
workflows and automates 

the approval process for any 
changes to network gear. 
And Opsware has spiffed up 
the browser-based user inter- 
face so that mere-mortal ad- 
mins don’t have to install any 
client code to use the soft- 
ware. A typical installation 
costs $20,000 for 50 network 
nodes. And, yes, the company 
offers a similar tool for server 
management. 


Corporate users of web- 
conferencing tools. . . 
... racked up 1.5 billion minutes 
of online meeting time in 2004. 





And that’s just on the 
service offered by 
Genesys Conferenc- 
ing Inc. in Montpelli- 
er, France. Tony Ter- 
ranova, vice president 
of product marketing 
at Genesys, says that 
the company is eye- 
ing future market op- 
portunities among 
midsize companies, which 
these days are more likely to 
use services such as WebEx 
from WebEx Communica- 
tions Inc. and LiveMeeting 
from Microsoft Corp. A more 
immediate move by Genesys 
is this week’s beta release of 


| an online billing and report- 


ing feature that’s designed to 
detail things such as which 
department or end user is 
burning up the webconfer- 
encing minutes. And the 
company says that in Q2, 

its online service will fully 
integrate with the calendar 
in Lotus Notes so users can 
schedule Genesys meetings 
through IBM’s e-mail soft- 
ware. Genesys already offers 
that capability for Outlook 
users. Also in Q2, you can ex- 
pect Genesys to add support 
for the Safari and Mozilla 
Web browsers. 


IT security rules 
modeled on... 

... Sarbanes-Oxley may be just 
around the corner. Pointing to 
the recent security gaffe by 
ChoicePoint Inc., which re- 
leased personal information 
about thousands of people to 
crooks [QuickLink 52787], 
Tery Larrew argues that the 
government will soon impose 
IT security regulations “with 


| the full force of Sarbanes- 


iBT 


Amount spent 
EU CeLTEL 
LE cliente 
Ca STAN TILL] 
it, says IDC. 


Oxley.” Larrew, CEO 
of Englewood, Colo.- 
based Vericept Corp., 
says, “We're only one 
step from what 404 is 
doing” — a reference 
to Section 404 of 
Sarb-Ox, which calls 
for companies to 
have an “adequate 


TERRANOVA 
etry om ny 
Notes support. 
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internal control 
structure” for finan- 
cial reporting. Of 
course, applying a 
similar requirement 
to IT security would 
be good news for 
Vericept, which 
supplies enterprise 
risk management 
tools and services to 
large companies. But such a 
law would wreak havoc in- 
side IT departments and 
“change the flow of dollars,” 
ballooning security budgets 
at the expense of other pro- 
grams, Larrew predicts. You 
can almost hear the smile 
in his voice when he says 
that. 


Comply with 
regulations and save . . . 
. «your company time and 
money. Wouldn’t that be nice? 
Well, Patrick Taylor claims 
it’s possible if you use Over- 
sight, his company’s name- 
sake “transaction integrity 
monitoring” tool. The CEO 
of Atlanta-based Oversight 
Systems Inc. says the vendor 
will release Version 3.0 of its 
Linux appliance this week. 
The upgrade is designed 

to monitor all accounts re- 
ceivable and general ledger 
transactions and verify that 
each step of the process ad- 
heres to corporate policies, 
according to Taylor. He 
claims that Oversight’s con- 
stant monitoring can reduce 
duplicate payments, redun- 
dant shipments, incorrect 
invoices and other money- 
losing miscues. Right now, 
Oversight’s prowess is limit- 
ed to the chief financial offi- 
cer’s domain, but Taylor en- 
visions that it will 
eventually be able 

to monitor such 
things as corporate 
security processes. 
Oversight charges 
$85,000 per year for 
each business process 
being monitored. 


@ 52929 
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IT Leaders Put Emphasis 
On Simplifying Systems 


Conn.-based mechanical and 


Premier 100 attendees streamline technology 
installations to cut costs, lighten admin load 


BY TODD R. WEISS 
AKE IT SIMPLE 
That con 
on the minds of 
many of the IT 
managers who plan to attend 
Computerworld’s sixth annual 
Premier 100 IT Leaders Con- 
ference, which starts today in 
Scottsdale, Ariz. 

In a survey of Premier 100 
honorees and other prospec- 
tive attendees that was con- 
ducted via e-mail 
in advance of the 
conference, 92% of 
the 200 respon- 
dents said they are 
actively working to 
simplify their IT 
environments. 

They cited steps 
such as consolidat 
ing software port- 
folios, enforcing 
internal technol- 
ogy standards and 
reducing the num- 
ber of vendors 
they deal with (see 
chart below). 

For example, 


eeeceseses 


YURI AGUIAR, CTO, 
Ogilvy & Mather 


i Aguiar, chief technology 


| officer at Ogilvy & Mather 


Worldwide in New York, said 


| the advertising and public re- 


lations firm is developing a 


| fully integrated, J2EE-based 


Web services framework in or- 
der to make its IT systems eas- 
ier and less expensive to man- 
age, as well as more secure. 


| electrical systems contractor 
| has adopted a one-vendor pol- 


| icy for purc 
| and software < 


: of hardware 
ss its operat- 

ing companies. Emcor has also 

installed software so it can 


| centrally track all IT equip- 


ment and monitor systems for 


| needed upgrades and compli- 


ance with corporate polic 
The goal is to lower costs 
and relieve the operating units 


| of burdensome IT administra- 


e standardization effort is | 
| better meeting the needs of 


| designed to reduce the num- 


ber of “silo-based” systems at 
Ogilvy & Mather 
and ensure that all 
applications have 
common security 
layers, Aguiar 
said. “At the end 
of the day, an inte- 
grated environ- 
ment is much sim- 
pler to manage 
and audit than a 
fragmented envi- 
ronment,” he 
added. 

Emcor Group 
Inc. CIO Joseph 
Puglisi said that to 
reduce complexi- 
ty, the Norwalk, 


WHAT ARE YOU DOING TO SIMPLIFY YOUR IT ENVIRONMENT? 


75% Pruning unneeded software and applications 


71% ~~—s Enforcing strict technology standards 


Reducing the number of vendors we use 


Standardizing on a few large vendors 


OTe! 


Consolidating data centers 


tion work so they can focus on 


their customers, Puglisi noted. 


| “We should have done more 
| and done it sooner,” he said. 


Rick Nolle, senior vice pres- 


| ident of IT at St. Louis-based 
| RGA Reinsurance Co., said 


he’s trying to keep the insur- 


| ance firm’s PeopleSoft applica- 
tions “as vanilla as possible to 
| streamline upgrades and be 


ready for a future migration.” 
Another goal is to look for 


| consistency in RGA’s hard- 


ware, software and networking 


| equipment and “get rid of all 


one-off solutior 


.” Nolle said. 
Panasonic Corporation of 

North America is using its 

tions infra- 


| structure to drive standard- 


ized business processes, 


| which simplify system con- 

| figuration needs, said Bob 

| Schwartz, CIO at the con- 

| sumer electronics maker in 

| Secaucus, N.J. Schwartz added 
| that the company is also plan- 
| ning a major redesign of its 


supply chain systems to 


| streamline and eliminate 


| president and CE 


some redundant software 
Suchindran Chatterjee 
of Lager- 


| fields Sports Entertainment 


2x in Phoenix, said IT 
tion efforts are be- 


| ing driven by financial pres- 
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BASE: 200 IT and business managers who are Premier 100 honorees or have registered to 

attend this year's Premier 100 IT Leaders Conference. The respondents were surveyed by 

Computerworld via e-mail last month. Multiple responses were allowed on all of the above 
questions except the one about the effect of regulatory compliance on IT. 


ONLINE EXTRA 


www.computerworld.com 


Everything is budget- 
he said. “Right 
now, the margins are very, 
very thin, so you have to save 
money on everything you can. 
That is the big motivator.” 


@ 52973 


Using thin clients 


Using application service providers 


See more results: Visit out Web site 
to read the full Premier 100 survey. 
© QuickLink 52940 








r your software provider? 


When your software provider is acquired twice in two years, it makes you wonder 
who is in control. If you’re a JD Edwards customer, that’s probably how you feel. 
For your business decisions you need an innovative partner who is committed to 


the future of your business and puts you in control. 


It's time to turn to Lawson for full service ERP software that will be there when you 


need it. For more information call 1-800-477-1357 or visit www.lawson.com/control. 
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More Explorer 7 
Details Emerge 


More details about Internet Ex- 
plorer 7 are trickling from Micro- 
soft Corp. The IE team wrote on 
its weblog that the browser will 
be available for “Windows XP 
SP2 and later,” which includes 
the forthcoming Windows Server 
2003 Service Pack 1 and Win- 
dows XP Professional x64 Edition. 
The blog noted that corporations 
have requested that the new IE 
support Windows 2000 [Quick- 
Link 52828], but no decision has 
been made. 


IBM Services Unit 
Targets Small Firms 


in an effort to drive more services 
business through partners, IBM 
Global Services launched several 
initiatives aimed at better target- 
ing small and midsize businesses. 
IBM estimated that it’s spending 
$300 million on the effort, which 
includes the creation of a dedicat- 
ed unit that will team with regional 
systems integrators in the U.S. 
and Europe to work on such deals. 


3Com Cuts 220 
Jobs Worldwide 


3Com Corp. cut about 11% of its 
workforce late last month, the 
company said in a filing with the 
U.S. Securities and Exchange 
Commission. According to the Feb. 
25 filing, 3Com laid off 220 em- 
ployees. The company cut 100 jobs 
in the U.S., 90 in Ireland and 30 in 
the U.K. It will take a related $15 
million charge in its fourth quarter. 


Intel Plans to Drop 
Pentium Moniker 


Intel Corp.’s Pentium 4 brand, its 
flagship desktop processor since 
2000, will be retired with the 
launch of the company’s first 
dual-core desktop processor, it 
announced at the Spring Intel De- 
veloper Forum. The company also 
outlined features of its first batch 
of dual-core processors. Intel said 
Pentium D, code-named Smith- 
field, will ship by year’s end. 





Suppliers 
Search for 


NEWS 


Early adopters say information could 
drive changes in internal operations 





BY CAROL SLIWA 
GRAPEVINE, TEXAS 
ORE THAN 100 
suppliers have 
started shipping 
RFID-tagged pal- 
lets and cases to Wal-Mart 
Stores Inc., CIO Linda Dillman 
said at the RFID World 2005 
conference here last week. The 
suppliers are able to access 
data about their shipments on 
Wal-Mart’s Retail Link extranet 
site within 30 minutes of the 
tags being read, she added. 

Making use of the data gen- 
erated by radio frequency 
identification devices is ex- 
pected to become a key capa- 
bility for some of those com- 
panies this year, said several 
users and analysts. It’s seen 
as the next step for suppliers, 
which until now have primari- 
ly focused on trying to ensure 
that tags, readers and other 
RFID products work. 

“It really is about taking that 
data and re-engineering your 
business processes,” said Mike 
O’Shea, director of corporate 





Auto-ID/RFID strategies and 
technology at Kimberly-Clark 
Corp. in Irving, Texas. “It’s not 
about the technology.” 

O’Shea said that Kimberly- 
Clark this year plans to exam- 
ine five business processes 
and test re-engineered ap- 
proaches that are driven by 
RFID data. He declined to pro- 
vide specifics, but he noted 
that the consumer goods mak- 
er is looking into “electronic 
proof of delivery” and ways to 
use “demand signals” in prod- 
uct replenishment. 


Tip of the iceberg 
Suppliers won't be the only 
ones plotting business process 
changes. Dillman said Wal- 
Mart has “just barely touched 
the tip of the iceberg” with 
RFID. Initial process changes 
include creating automated 
and prioritized pick lists for 
store employees to use when 
stock is low on shelves and 
products are available in the 
back room, plus exception re- 
porting capabilities for when 


SAP Buys Retek to 
Build Retail Business 


BY MARC L. SONGINI 
Looking to boost what has been 
perceived as an underwhelm- 
ing presence in the retail mar- 
ket, SAP AG last week gobbled 
up software maker Retek Inc. 

SAP said it has agreed to pay 
$496 million for Minneapolis- 
based Retek, a developer of 
retail applications. The trans- 
action could close as early as 
next month, said SAP America 
Inc. spokesman William Wohl. 

Customers had varied opin- 
ions about the deal. 

Robin Lynas, CIO at Mark’s 
Work Wearhouse Ltd. in Cal- 





gary, Alberta, said he is wait- 
ing to see how the situation 
plays out in the next few 
weeks, though he believes that 
SAP will leave Retek intact 
while providing “support and 
capital where needed.” 

“SAP went after a retail ver- 
tical because they don’t play 
well there right now,” Lynas 
said. Mark’s Work Wearhouse, 
a retail clothing company, has 
been using Retek’s point-of- 
sale software at its 320 stores 
for 18 months. 

The Clarks Companies NA, 
a Newton, Mass.-based foot- 





_ RFID Data, 
otential Uses 


It really is 
about taking 
that data and re- 
engineering your 
business processes. 


MIKE O’SHEA, KIMBERLY-CLARK 


that isn’t the case, she said. 
Jeff Woods, a Gartner Inc. 
analyst, said early-adopter re- 
tailers are being aggressive in 
trying to use RFID-generated 


| data to improve their business 


processes. Woods added that 
such efforts have been more 


| spotty among suppliers, most 


of which have taken a “slap- 
and-ship” approach — a strat- 
egy that works for them, since 
RFID won't help to improve 
their internal warehouse 
processes, he said. 

Many suppliers have done 
RFID-related systems integra- 
tion work, but most don’t 
know what to do with the data 
at this point, said IDC analyst 
Richard Dean. “They’re using 
it, but not very effectively at 
the moment,” he said. 

Kimberly-Clark receives 
RFID data from both Wal- 


wear maker, uses Retek’s mer- 
chandising system to support 
its supply chain and inventory 
management processes. 

If SAP tightly integrates 
Retek’s applications into its 
own ERP software architec- 
ture, it could provide Clarks 
with “expanded possibilities,” 
said CIO Richard Scheerer. 
Currently, Clarks uses Oracle 
Corp.'s financial software 
rather than SAP’s. 

Wohl said SAP’s move isn’t 
specifically intended to buy 
market share or new custom- 
ers, but instead helps round 
out SAP’s offerings and exper- 
tise. It will also boost SAP’s 
retail presence in the U.S., 
where Retek is strong, he said. 

He noted that the move is 
not a reaction to Oracle’s re- 
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Mart and Target Corp., which 
has set a June deadline for its 
top 100 suppliers to start using 
RFID. O’Shea said that over 
the past two months, the two 
retailers have been seeking 
Kimberly-Clark’s opinion on 
“meaningful formats” for the 


| data. He added that some re- 


tailers and suppliers are work- 
ing with EPCglobal Inc. to de- 
fine parameters for exchang- 
ing RFID data electronically. 
Drug maker Purdue Pharma 
LP began using RFID technol- 
ogy last year to comply with 
a Wal-Mart directive to tag 
Class 2 narcotics. Sajan Idicu- 
la, a senior systems analyst at 
Purdue, said the Stamford, 
Conn.-based company sent its 
first RFID-tagged shipments 
to the retailer in November. 
Instead of just taking a slap- 
and-ship approach, Purdue 
brought in SAP AG and Fort 
Wayne, Ind.-based Northern 
Apex Corp. to help hook into 
its systems the RFID data it 


| collects internally. Purdue 


now feeds the data into SAP’s 
supply chain event manage- 
ment module. Plans call for 
the data to eventually be tied 
to SAP’s R/3 ERP software, 
Idicula said. @ 52977 
PRICING PROBLEM 

One RFID vendor says the cost of tags 


won't hit single digits any time soon 


QuickLink 52993 
www.computerworld.com 


cent buyout of rival ERP ven- 
dor PeopleSoft Inc., since most 
competition in the retail mar- 
ket isn’t from those vendors 
or any third-party software 
maker. Retailers generally use 
home-grown systems, he said. 

Despite investing consider- 
able development resources 
into its retail portfolio in the 
past few years, SAP has been 
unable to grow its market 
share as quickly as it had 
hoped, according to IDC ana- 
lyst Mike Witty. 

He called on SAP to explain 
to Retek customers an “inte- 
gration strategy and timeline, 
how overlapping functionali- 
ty issues are going to be ad- 
dressed and what the upgrade 
path will be for future releas- 


es.” @ 52951 
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EDS Tapped for $7.7B 
U.K. Military IT Upgrade 


LONDON 


HE U.K. MINISTRY OF DEFENCE last 
Tee selected a consortium of 

vendors led by Electronic Data 
Systems Corp. for the first stage of 
what’s expected to be a 10-year, £4 bil- 
lion ($7.7 billion U.S.) IT moderniza- 
tion contract. 

The contract will be awarded in 
stages, with the first installment val- 
ued at £2.3 billion ($4 billion). Plano, 
Texas-based EDS called the initial 
award its single largest contract win 
since 2002 and said it expects to start 
work on the project in April, after de- 
tails of the agreement are ironed out. 

The goal of the project is to inte- 
grate, upgrade and centrally manage 
about 100 computer sys- 
tems and hundreds of 
applications that serve 
320,000 end users at 2,000 
locations, a Defence Min- 
istry spokesman said. 

The consortium formed 
by EDS is called Atlas and 
includes Fujitsu Ltd., Gen- 
eral Dynamics Corp. and 
junior partners Hewlett- 
Packard Co. and IBM. Af- 
ter a three-year bidding 
process, Atlas beat out a 





GLOBAL FACT 


Number of people directly 
employed by India’s IT 
PUR CS i cece sl ge lect 
outsourcing industry. 


An International 
IT News Digest 


rival group headed by Computer Sci- 
ences Corp. 
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IT Skills Shortage 
Hits Aussie Agencies 


SYDNEY 


EVERAL AUSTRALIAN government 
IT projects face delays and esca- 


lating costs because of a high- 
level skills shortage at federal agencies. 

Centrelink, a human services agency, 
and the Health Insurance Commission 
are struggling to fill positions for se- 
nior developers and project managers 
on newly approved IT initiatives. 

In addition, Bill Gibson, CIO at the 
Australian Taxation Office, said a ma- 
jor CRM project had to be moved to 
Melbourne because the agency was 
unable to hire the neces- 
sary 100 senior-level IT 
staffers in the capital city 
of Canberra. 

There’s an overall short- 
age of senior IT project 
managers within Aus- 
tralia, and the problem is 
especially acute at federal 
and state government 
agencies, said Phillip Tus- 
ing, an analyst at IT re- 
cruiting firm Greythorn 
Australia in Sydney. 


Tusing added that project managers 


| with newer IT skills will be able to 


name their price for at least the next 


| five to six months. 
| m JULIAN BAJKOWSKI., 
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| Group Wants to Create 


African Telecom Agency 


|; LUSAKA, ZAMBIA 


HE COMMONWEALTH Telecommu- 
T iicsion Organisation, a London- 

based international development 
agency, last month called for the cre- 
ation of a single authority to harmo- 
nize telecommunications regulations 
and licensing policies across Africa. 

Ekwow Spio-Garbrah, the organiza- 
tion’s CEO, said a continental regulato- 
ry body could advance the develop- 
ment of IT and communications in 
many African countries. 

The proposal was debated last 
month at a conference in Ghana, 
where some delegates argued that it 
would be more realistic to foster re- 
gional agencies instead of creating one 
superagency. 

Africa already has several regional 
telecommunications groups, including 
the Telecommunications Regulators 
Association of Southern Africa, the 
West African Telecommunications 
Regulators Association and the Forum 
on Telecommunication Regulation in 
Africa. @ 52917 
m MICHAEL MALAKATA, IDG NEWS SERVICE 
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Briefly Noted 


Thierry Breton resigned as chair- 
man and CEO of France Telecom SA 
late last month to become the 
French government's minister of fi- 
nance. The company’s board named 
Didier Lombard, who had been in 
charge of technology and partner- 
ships, to replace Breton. France 
Telecom is the former monopoly 
telecommunications carrier in 
France and maintains a close rela- 
tionship with the French govern- 
ment, which still holds 42.2% of 
the company’s shares. 

mw PETER SAYER, IDG NEWS SERVICE 


Yamaha Motor Europe NV in 
Amsterdam is using software from 
SPSS Inc. in Chicago to analyze 
responses to customer surveys, 
SPSS announced last week. The 
vendor added that Yamaha plans 
to use the feedback to improve the 
designs of its motorcycles. 


Financiera de Desarrollo Territor- 
ial, the Colombian government's fi- 
nance agency, has implemented 
Web-based business process au- 
tomation software from Verity Inc., 
the Sunnyvale, Calif.-based compa- 
ny said last week. The Bogota- 
based finance agency is using Veri- 
ty LiquidOffice to process credit ap- 
provals for low-interest mortgages. 


EDS Pushing Massive IT Retraining Effort 


20,000 IT workers 
to get training in 


Java, .Net, J2EE 


BY THOMAS HOFFMAN 


Electronic Data Systems Corp. 


has embarked on a mammoth 
retraining program aimed at 
providing 20,000 of its 87,000 
technical workers with updat- 
ed business and technology 
skills by the end of this year. 
The effort began about a 
year ago, when the Plano, 
Texas-based IT services giant 
began evaluating the skills of 
its 117,000 worldwide workers 
and consolidated multiple IT 
skills databases into a single 
SAP AG skills repository, said 
Dave Arcemont, vice presi- 





dent of global learning and de- 
velopment. 

The program is part of the 
EDS Multi-Year Plan, which 
Arcemont described as a “re- 
volving footprint” of where 
the company is going over the 
next three years. “We worked 
very closely with the product 
managers in the portfolio 
group to see what skills were 
needed to support” customer 
demand, he said. 

That analysis of customer 
project demand found that 
EDS needed to retrain a large 
number of its 87,000 technical 
workers with outdated skills 
so they could learn newer 
technologies such as .Net, Java 
and J2EE, said Arcemont. Last 
September, EDS launched a 





retraining Web portal for 
those employees, encouraging 
them to take advantage of on- 
line and classroom courses be- 
ing offered. 

“We had learning advisers 
on a hotline to provide real- 
time coaching,” said Arcemont. 

Thus far, EDS has had 17,200 
employees enter the retraining 
program. 

EDS has set a target of hav- 
ing 20,000 technical workers 
enroll in one or more of the 
718 training courses it has set 
up for 2005, said Arcemont. 

Although he declined to 
quantify the investment that 
EDS is pouring into its retrain- 
ing effort, Arcemont did say 
that the company has added 
$35 million to its training 





budget for this year. 

Katherine Spencer Lee, ex- 
ecutive director at Robert Half 
Technology, an IT staffing ser- 
vices firm in Menlo Park, 
Calif., said she is impressed 
with EDS's approach. “They’re 
reaching out to companies like 
IBM, Dell and Fujitsu, and 
they were humble enough to 
say, ‘We don’t have all the 
knowledge, and who can help 
us with this?’ ” 


Skill-building Hurdles 

Most CIOs and IT organiza- 
tions mistakenly look at re- 
training as a one-time event, 
said Mark Lutchen, a partner 
in the IT business risk manage- 


| ment practice at Pricewater- 


houseCoopers in New York. 
“They recognize a set of 

needed skills, they develop 

them, and then they forget 





about them until they become 
obsolete,” he said. 

Another problem CIOs face, 
said Lutchen, is that when 
they present IT workers with 
opportunities to broaden their 
technical and business acu- 
men, most technical workers 
don’t want to bother to learn 
new skills. That’s troublesome 
on several levels, he said, not 
the least of which is that it can 
lead to a disproportionate 
number of high-salaried, expe- 
rienced IT workers with out- 
dated skills. 

Plus, technical workers who 
are willing to receive addition- 
al training “want to narrowly 
focus on the technical skills 
only, and that’s not the right 
approach,” said Lutchen. “Peo- 
ple skills and communication 
skills are just as important as 
the technical skills.” @ 52970 
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Health Data Exchanges 
Get a Boost From 


Hospitals, Chicago health agency plan 
rollouts for online information sharing 


BY HEATHER HAVENSTEIN 
WO LARGE HEALTH 
care organizations 
are launching proj- 
ects to build auto- 

mated systems for exchanging 

data, a key step in the Bush ad- 
ministration’s plan for devel- 
oping a national health IT in- 
frastructure. 

New York-Presbyterian 
Healthcare System, a federa- 
tion of hospitals and nursing 
homes that is the country’s 
fourth-largest health care 
provider, this summer will be- 
gin work on a collaborative 
network that will let five of its 
acute-care hospitals share 
quality-of-care information 
with one another. Officials 
said they aren’t sure when the 
network will be operational. 

Meanwhile, the Chicago De- 
partment of Public Health is 
finalizing plans for a Java- 
based system designed to help 
it detect and respond to out- 
breaks of infectious diseases, 
including those caused by bio- 
logical terrorism attacks. 

The New York-Presbyterian 
network will build on a proof- 
of-concept project that New 
York-Presbyterian Hospital 
completed in December with 
IBM, two other hospitals in In- 
dianapolis and Nashville, and 
several federal agencies. The 
pilot network was used to ag- 

Correction 

A COLUMN ABOUT the Federal 

Communications Commission in 

last week's issue (“FCC: Mission 

Accomplished”) opened with a 

quote taken from the agency's 

Web site that was erroneously 

characterized as Congress’ origi- 

nal charge to the FCC in 1934. 

The quote details the FCC's cur- 

rent mission. The error was intro- 

duced during the editing of the 
column, 


| gregate data on infectious dis- 


eases from disparate systems 
for reporting to the agencies. 
New York-Presbyterian 


| plans to use software that IBM 
| developed out of the pilot 
| project, said J. David Liss, the 





health care system's vice pres- 
ident of government relations 
and strategic initiatives. 


Integration Brokers 
IBM began shipping the Web- 
Sphere Business Integration 


| for Healthcare Collaborative 


Network technology last 


| month. The software uses in- 


tegration brokers to route data 
from “publishers,” such as 
hospitals and medical clinics, 


| to government agencies and 


other “subscribers.” A gateway 
installed at participants’ sites 

filters, links and maps data el- 
ements based on applied busi- 


ness rules, according to Liss. 
The New York-Presbyterian 
system, which includes 5] fa- 
cilities in New York, New Jer- 
sey and Connecticut, received 


| a $1 million grant from the 


U.S. Department of Health and 
Human Services for the up- 


coming project. As part of the 


planned network, officials are 


| “looking at how we can embed 


quality assessment measures 
across numerous hospitals,” 
Liss said. 

Chicago’s Public Health 
Department, the second- 
largest local public health 
agency nationwide, has fin- 


| ished the design of its elec- 
| tronic disease-surveillance 
| system, said Debbie Sills, a 


consultant at New York-based 
Deloitte & Touche USA LLP, 
which is helping to build the 
system. An initial implemen- 


| tation is due to be deployed 
| in the fall. 


The surveillance system 
will enable physicians to file 


NEW YORK-PRESBYTERIAN HOSPITAL piloted a data-sharing network. 


www.computerworid.com 


| online reports about suspect- 
| ed cases of infectious diseases. 
| It will integrate the filings with 


electronic lab reports and send 


them to public health investi- 


gators via e-mail. Information 


| will be stored in an Oracle 
| database, and Sills said the 
| agency will be able to quickly 


change database tables as dis- 
ease outbreaks occur. 
Health care officials in 


| Chicago want to reduce the 


time it takes to begin an inves- 
tigation after doctors notice 
suspicious conditions in pa- 
tients, Sills said. “Now it can 
take days, if not weeks, to get 
outbreaks contained,” she not- 
ed. “That would be a disaster 
in a bioterrorism incident.” 
Deloitte is modeling Chi- 
cago’s system on one it 
helped the Pennsylvania 
Department of Health build. 
That system was deployed 


in 2003. @ 52976 
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| Continued from page 1 


ternal IT service providers 
and reducing IT expenses by 
$63 million between 2001 and 
2004. 

Still, Pelosi said that getting 
PSEG’s 300-person IT organi- 
zation to run smoothly as a 
business unit took a fair 
amount of time and effort. 
Technology workers need a 
high-level understanding of 
financial plans and concepts 
such as return on investment, 
Pelosi said at the IT Financial 
Management Week confer- 
ence here last week. The event 


| was organized by the New 


York-based International 
Quality & Productivity Center. 
Other problems can crop up 
even after years of evolving an 
IT shared-services business. 
For instance, Carlson Compa- 
nies Inc. has had an IT shared- 
services organization since the 





late 1990s. Since 2001, the 
Minneapolis-based provider 


| of travel and hospitality ser- 


vices has automated its 


| chargeback system to the 
| point where business-unit cus- 
tomers can view invoices on- 


line with a detailed summary 
of services and pricing, said 
Bev Swanson, director of busi- 
ness strategy at Carlson. 

But there have been snags. 
For example, Swanson’s group 


| once charged business units 


for storage on a per-gigabyte 
basis on the 15th day of each 
month. Last year, it learned 
that some business managers 
were moving data from one 
set of disk drives to another 
on the Ith, resulting in zero- 
sum charges, she said. Then 
they would move the data 
back to the original disk drives 
on the 16th. A business execu- 
tive acknowledged moving the 
data, but “we didn’t go back 
and recharge them” for the 
storage fees, Swanson said. “It 





was a relationship issue.” 
At Lehman Brothers Hold- 


ings Inc., depreciation on new 


and existing hardware pur- 
chases is automatically calcu- 
lated and applied to customer 
invoices using software from 
San Francisco-based Business 
Engine Corp. The New York- 
based investment bank put the 


| system into production earlier 


this year, according to Brian 
Greenberg, Lehman’s vice 
president of IT. 


Defining Use 

Last year, KeySpan Corp. de- 
veloped a 26-category IT ser- 
vices catalog. In November, 
the company began issuing an 
itemized monthly bill of IT 
services for business-unit cus- 
tomers, said Frank La Rocca, 
acting CIO at the Brooklyn, 
N.Y.-based electric and gas 
utility. “We met with [busi- 
ness] customers two months 
ago, and they struggled with 
defining what they use from 





IT,” he said. The itemized bill 
“helps articulate that.” 

Still, KeySpan has decided 
not to implement an automat- 
ed chargeback system — at 
least for the time being. “Our 
CFO told us, ‘Don’t spend a 
quarter to chase a nickel,’ ” 
said La Rocca. 

Some CIOs have had to 
make difficult choices in order 
to effectively run their IT 
shops. For example, The 
Williams Cos., a Tulsa, Okla.- 
based natural gas and electric 
power company, has whittled 


| its IT organization from 1,000 
| people across four IT shops to 


just 100 people in a single de- 
partment over the past few 
years — thanks, in part, to the 
outsourcing of some of its ap- 
plication support, said CIO 
Ron Mucci. 

He added that the IT work- 
ers who remain with the unit 
“are expected to have as much 
business knowledge as busi- 
ness people.” @ 52969 
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i2 Appoints Head, Inspires 
User Hopes for a Rebound 


Plan to boost supply chain software 
maker's consulting group gets approval 





BY MARC L. SONGINI 
SERS OF i2 Tech- 
nologies Inc.’s ap- 
plications last week 
said they are hope- 

ful that the installation of a 

new CEO portends a brighter 

future for the troubled maker 
of supply chain software. 

The Dallas-based company 
last week appointed one of its 
directors, Michael McGrath, 
CEO and president, replacing 
co-founder Sanjiv Sidhu (see 
Q&A with McGrath this page). 

An i2 spokeswoman said 
McGrath, co-founder and re- 
tired CEO of Waltham, Mass.- 
based consulting firm Pittiglio 
Rabin Todd & McGrath Inc., 
was chosen from among sev- 
eral candidates. The company 
stated that McGrath’s position 
is temporary. Eventually he 
will replace Sidhu as chair- 
man, and a new CEO will take 
McGrath’s slot. 


Experience May Help 
McGrath’s background as a 
third-party integrator should 
help in i2’s effort to broadly 
expand its consulting opera- 
tion, said Ravi Vancheeswar- 
an, director of planning for 
the integrated products group 
at ON Semiconductor Corp. 
in Phoenix. The company 
runs i2 Demand Planner, 
Supply Chain Planner and 
Factory Planner, among other 
applications. 

McGrath’s plan to expand 
i2's consulting services is also 
good news for ON, Vanchees- 
waran said, noting that “i2 has 
good supply chain manage- 
ment tools and supplier man- 
agement tools, and this will 
bring a focus on how to extract 
their value for customers.” 

While i2 has provided ON 
with adequate technical con- 
sulting services to help in its 





effort to create a supply chain 
management infrastructure, 
the vendor needs more busi- 
ness-process-focused consult- 
ing to help users further ex- 
ploit the software, Vanchees- 
waran said. 

“The next question we need 
to ask is, ‘Where should I be 
holding inventory, and how 
can I best leverage the tools to 
give us the biggest bang for 
the buck while keeping inven- 
tory levels down and on-time 
delivery up?’” he said. 

Another i2 user, Richard 


| Scheerer, CIO at The Clarks 

| Companies, North America, 
also said he is encouraged by 
McGrath’s appointment and 
plans for the vendor. “I2 con- 
tinues to be an important 
component in Clark Compa- 

| nies’ application portfolio,” he 
said in an e-mail. 

“It appears that i2 has 
weathered the troubled times, 
and any effort to grow the 
company and make it a bigger 
player in the supply chain 
space is good for the current 
| user base,” Scheerer said. 

The Newton, Mass.-based 
maker of shoes uses i2’s De- 
mand Planner, Supply Chain 
Planner and Demand Fulfill- 








‘ [McGrath’s] 
interim role is 
not purely [to be] a 
temporary shep- 
herd, but [it’s] more 
of a rescue mission 
to right a ship he 
will remain with. 


| KEVIN O’MARAH, ANALYST, 


AMR RESEARCH INC 


ment applications to support 
manufacturing and customer 
service processes. 

While it’s unlikely that any- 


www.computerworld.com 


one can rapidly restore i2 to 
full financial health, McGrath 
has a special advantage in that 
he is both an outsider to i2 and 


| has some intimacy with its sit- 


uation from his role on the 
board of directors, said Kevin 
O’Marah, an analyst at AMR 
Research Inc. in Boston. 

“His interim role is not 
purely [to be] a temporary 
shepherd, but [it’s] more of 
rescue mission to right a ship 
he will remain with,” O’Marah 
noted. 

Last year, i2 lost $1.4 million 
as revenue slumped by more 
than $100 million to $389 mil- 
lion. If i2 can stop hemorrhag- 
ing cash and change its focus 
to generate business results, 
its technological excellence 
could give it the ability to 
drum up meaningful new 
business, O’Marah said. “Peo- 
ple tend to underestimate how 
strong the product set is and 
how satisfied early customers 
were,” he said. @ 52920 





New i2 CEO to Resize, 
Refocus Troubled Firm 


| McGrath will 
refocus offerings, 
cut up to 400 jobs _| 


BY MARC L. SONGINI 
After a seven-month search, 


| ailing supply chain software 


manufacturer i2 Technologies 
Inc. named board member 


| Michael McGrath president and 

| CEO. He replaces i2 co-founder 
| Sanjiv Sidhu, who will remain 

| there as chairman. 


McGrath, a member of the i2 
board of directors since August, 


| isa co-founder and former 
| chairman and CEO of high-tech 
| consulting firm Pittiglio Rabin 


Todd & McGrath Inc. He re- 


| tired from that post last July. 


I2’s financial position has 


| been shaky for some time. In 


an interview with Computer- 
world last week, McGrath said 
that he plans to keep the Dal- 
las-based company indepen- 
dent. He also explained that 
i2’s 2,000-person workforce will 
have to be cut by up to 20%. 


What makes you qualified to run 
i2? I joined the board this 
summer after following i2 for 
many years. I’ve been in the 
software industry since its be- 
ginnings and created and ran 

| one of the major consulting 
firms in the world. 


Can you give your plans 
for i2? I can’t give you 
specifics, as I’ve had 

| the job for less than 24 
hours. We have to re- 

| gain the respect of our 
investors and show 
them i2 is, in fact, a 
profitable business. 

We need to get the 
resizing of the company to 
happen. One has to expect 

| layoffs, and we've told people 
internally that’s a part of cost 
reduction. 

The second objective is to 
provide a strong foundation 
for the company. For example, 
we need to improve the way 
we deliver consulting services 
to be more efficient. 





Third, we need to refocus 
our strategy to make sure we 
have solutions to deliver big 
results to clients. 


How radical will the changes be? 
Pretty radical. I’m somebody 
who likes to move quickly and 
make dramatic changes and 
get big results. 

The first milestone will be 
in 30 to 40 days, and we'd like 
to give the demonstration we 
can be profitable and show the 

changes I’m talking 
about. 

12 has the potential to 
be a profitable compa- 
ny. Our commitment to 
our customers is to give 
them solutions, and 
these require not just 
applications but appro- 
priate middleware and 
application integration. 

It includes best practices and 


| process changes. It means 
making our consulting ser- 


vices more robust and work- 
ing with consulting partners. 


What is your specific technology 
vision? It’s a little premature 
for me to say. The big thing is 
that we're dedicated to big re- 
sults for our customers, and 


| 





that’s going to be the theme 
behind all our software and 
services. 

We're not going to be happy 
just selling something and not 
getting results for customers. 
We have to have the courage 
and maybe even sell them less. 


In recent years, i2 has been 
through a lot, including the stock 


exchange delisting and a U.S. Se- 
| curities and Exchange Commis- 
| sion investigation. Is that going to 


be a problem for you to over- 
come? It’s potentially an obsta- 
cle. It’s something we’re hop- 
ing we can put behind us. 


We've got a fresh start here, 
| and we're building something 


new at i2. 


| Can you give an update on your 
| efforts to get relisted? We're 
| continuing to do that. We had 


a stock split. We [next] need 
to work with Sanjiv to bring 
on a couple of independent di- 
rectors. It’s important a com- 


| pany like ours be listed on 


Nasdaq. 
We have to instill confi- 
dence in the customer who 


| makes a major investment in 


us and needs to know we’re 
going to be around. @ 52922 
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IBM, Lenovo Executives Outline Plans 


BY ROBERT McMILLAN 


Yuanging, president and 
CEO of Lenovo Group Ltd., and 


| Stephen Ward, general manager 
| of IBM’s Personal Systems 
Group, face an interesting few 

| months. The executives must 


“NEWS 


. - | 
| manage the creation of what 


| Ward calls the “first-ever Chi- | 
| nese company to become multi- | 
| national” while looking tople- | 


THE BUSINESS 1S ABOUT TO DEMAND ANOTHER 
CHANGE TO YOUR IT INFRASTRUCTURE. 
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CEO and Yang chair- 
man. Ward and Yang 
spoke to the IDG News 
Service last week dur- 


; ing IBM’s Partner- 


| World conference. 


What is the No. 1 issue for you 
right now? Are you focused on lo- 
gistical issues, strategy issues or 
political issues? Ward: The first 
things we’ve spent time on are 
our customers, our partners 
and our employees. The sec- 
ond is the development of the 
strategy going forward. The 
third is culture. Yang: We have 
to close this deal and separate 
the PC business from IBM. 


What is the biggest problem 

that you’re facing? Ward: The 
biggest problem that we’re 
facing, by far, is communica- 
tions. We’re communicating 
like crazy. I have literally met 
with 100 CEOs on this topic. 
And I could spend all my time 
just meeting with customers, 
as could Yuanging. 


| 
| 
| 
| 


How many employees are going to 
be moving and where? Yang: We 
don’t have a big plan to move 
too many people from China 
to the U.S. or from the U.S. to 
China. Ward: Our strategy 
right now says research and 
development should be done 
where smart people are. Sales 
has to be done where you can 
talk to business partners. Over 
time, you have to constantly 
look for how you can do 
things much more efficiently. 


Lenovo has tried and failed to ex- 
pand into new areas before. What 
makes you think you will be more 
successful this time? Yang: I 
think the new company should 
focus on the desktop, but we 
can try new things in the Chi- 
nese market. If we can be suc- 
cessful in other areas, we can 
take them worldwide. 


So will we be seeing Lenovo- 
branded printers and mobile 
phones in the U.S.? Ward: You 
will see Lenovo-branded prod- 
ucts in the United States. We 
haven't decided which ones, 
but you will definitely see 
Lenovo-branded PCs and lap- 
tops, as well as IBM ThinkPad- 
branded products. @ 52924 





WE KEEP YOUR PEOPLE MOVING 
WITHOUT SHAKING THINGS UP 
AT THE OFFICE. 


Soon, over 99 million employees woridwide will be working outside the office. Is your communications 
infrastructure ready? It will be with Avaya IP Telephony. Give y 

road, at home, anywhere , 

Keep your existing network up and running. 
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“BEST PRACTICES FOR IP DEPLOYMENT IN A MULTI-VENDOR ENVIRONMENT.” 
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DON TENNANT 


Here to Stay 


EARLY A DECADE AGO, just a few 
months after Microsoft shipped Win- 
dows 95, I asked Bill Gates if it was a 
conscious decision in the develop- 
ment of that product to give Windows 


more of a Mac look and 
feel. Of course I knew 
he’d say it wasn’t, but I 
couldn’t resist asking. 

“There was no goal 
even to compete with 
Macintosh,” Gates pro- 
claimed. “We don’t even 
think of Macintosh as a 
competitor.” 

That was a crock, so 
I pressed the issue a 
little. I asked him how 
he accounted for the 
widespread perception that Win- 
dows 95 looked a lot like Mac 88, and 
whether the similarity was just a co- 
incidence. I didn’t expect a sobbing 
confession of mimicry, but I thought 
it would be cool to see how he’d re- 
spond. Surprisingly enough, Gates 
shifted gears and became more 
forthcoming. 

“Some of the things in Windows 95 
the Mac had earlier,” he acknowl- 
edged, citing long file names, plug- 
and-play capabilities and built-in 
peer-to-peer networking. You know 
that had to be tough for him, so 
when he proclaimed that “there’s a 
ton of things even in Windows 3.1 
that the Mac doesn’t have, that 
someday they'll probably add to 
their system, too,” I didn’t have the 
heart to call him on it when he didn’t 
cite any examples. 

That exchange with Gates came to 
mind after I read the “Giants in Jeop- 
ardy” story on page 32, part of our 
special report on the future of IT. I 
found it striking that the IT visionar- 
ies who foresee a decline in Micro- 
soft’s dominance due to threats like 
Linux and Google never mentioned 
Apple Computer. 

Long before Linux became a thorn 
in Microsoft’s side, Apple was a full- 





fledged pain in the com- 
pany’s you-know-what. 
On the one hand, it was 
in Microsoft’s best inter- 
est for Apple to be suc- 
cessful, since software 
for the Mac has long 
been a huge business for 
Microsoft. That, in fact, 
is why Microsoft invest- 
ed $150 million in Apple 
two years after the 
launch of Windows 95. 
On the other hand, Mi- 
crosoft had to deal with the abhor- 
rence of being perceived as a tech- 
nology follower, playing catch-up to 
the operating-system strides that Ap- 
ple was making. That the best tech- 
nology doesn’t always win is a truth 
of life to which Microsoft owes much 
of its success, and Apple’s technolo- 
gy never really bruised much more 
than the egos of Microsoft’s execu- 
tives. Still, it’s interesting that Apple 
has become so completely marginal- 
ized in some quarters that it’s no 





longer even part of the discussion of 
a future world order in which Micro- 
soft is seen as less dominant. 

I’m no IT futurist, but trust me, 
you need to include Apple in the dis- 
cussion. If you don’t believe it, I urge 
you to read Mark Hall’s story in last 
week’s issue “In Business to Stay” 
[QuickLink 52603]. It’s a compelling 
account of how a growing number of 
your peers are using Apple’s tech- 
nology in corporate environments 
outside of traditional Mac strong- 
holds like publishing. One of the key 
attractions, Hall notes, is that the 
Mac OS X operating system, with the 
exception of its user-interface and 


| management tools code, is an open- 


source version of Unix that’s tuned 
for open-source offerings like the 
Apache Web server, MySQL data- 
base and JBoss application server. 

Combine that open-source carrot 
with near-bulletproof security, and 
you begin to understand that we’re 
talking about more than being late to 
the game with long file names here. 
The best technology may not always 
win. But it’s not going to go away, 
either. @ 52930 
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Getting Back 
The HP Way 


IKE MANY people who 
remember Hewlett- 


Packard in its glory 
days, I offered a quiet cheer when 
the company’s board of directors 
showed Carly Fiorina the door early 
last month. It was an overdue recog- 
nition that her tenure as CEO, while 
not entirely a disaster, was essential- 
ly a failure. 

Her departure brought to mind a 
scenario that was proposed during 
the long battle over whether to buy 
Compagq, which pitted Fiorina against 
the son of one of the founders. I can’t 
remember where I heard (or possibly 
read) the suggestion, but it went 
along the following lines: 

1. HP goes ahead 
and buys Compaq. 

2. HP then sells 
its printer business 
to Agilent Tech- 
nologies Inc. A 
spin-off from the 
old HP, Agilent fo- 
cuses on the test 
and measurement 
businesses that 
once were core to 
HP’s operations. 

3. HP keeps the 
computer business 
and renames itself 
Compaq. 

4. Agilent, which has now re- 
assembled the businesses that made 
up the heart and soul of the old HP, 
renames itself Hewlett-Packard. 

The scenario made sense in a 
wickedly ironic sort of way, though it 
was obviously not in the cards at the 
time. It makes even more sense now, 
because HP is plainly flailing around 
for a strategy. 

I can even suggest a CEO for the 
newly revived Compaq: its former 
CEO Michael Capellas. He’s been 
running telecommunications firm 
MCI, which is selling itself to one 
of the big regional phone monopo- 
lies. So he’ll be looking for some- 
thing to do. No doubt he’s also a 
candidate for the top HP job. But 
whether anyone can manage the 
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Network Adapter Teaming 


ProLiant Essentials 


eae 5 i Intelligent Networking Pack 
Organizations are under growing pressure to support non-stop business 
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center of the IT infrastructure, servers play a critical role in determining Advanced Memory Protection 
both the overall availability as well as the total cost of ownership of Redundant Cooling and Power 
that infrastructure. RAID Technology 

To ensure high availability, a server must proactively respond to 
failures, both within the server and the network to which it is attached. 
High availability requires that a system administrator manage a server 


without having to be colocated with that server, and that the server 





remain available while a failed component is repaired. 
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NE to influence server 
availability. HP and Intel are developing 
sophisticated technologies like redundant 
Ethernet connections and network adapter 
teaming that enhance server availability 
and enable IT organizations to satisfy 


today’s business requirements 


Server adapters act as an interface between 
the server and the network. Therefore, they 
play a critical role in determining server 
availability and performance. 


Some server adapter features are 


based on industry standards. These include 


flow control (IEEE 802.3x*), VLAN tagging 
(IEEE 802.1Q*) and link aggregation 

(IEEE 802.3ad*). Other influences are 
vendor specific, such as the amount 

of onboard memory and the operating 
systems supported. 

To address slot-constrained 
environments, server adapters offer 
multiple ports. Multiple port server adapters 
allow IT organizations to meet current 
demands like segmenting the LAN to 
reduce network bottlenecks. In addition, 
multiple port server adapters enable fault 


tolerance to maintain server availability 


Multiple port server adapters enat 
IT organizations to respond to industry 
trends, such as server consolidation and 
virtualization, that are driving the need for 
more network ports. These are also required 


to accommodate virtual servers while 


supporting segmentation and fault tolerance 
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ProLiant servers support multiple 
port server adapters. The HP NC6170 and 
NC7170 Gigabit Ethernet server adapters 
with Intel technology offer 128 KB of 
onboard memory, which leads to enhanced 
performance. Flexibility is increased because 
these adapters support copper and fiber 


optic interfaces, as well as Ethernet, Fast 


scalability by doubling the number of ports 


that a given server can support 


HP’s network adapter teaming consists of two 
to eight NIC ports that function as if they were 
a single NIC. When configured for network 

fault tolerance (NFT) teaming, traffic within a 


team is automatically shifted from a failed port 






to a working port without disruption of 





service. The network remains available while 





the failed network device is replaced 

Transmit load balancing (TLB) enables 
the sharing of the server's outbound network 
traffic among the members of a team. TLB 
enhances availability because it can be split 
across multiple network switches to provide 
switch redundancy. 

When configured for switch-assisted 
load balancing (SLB) teaming, all inbound 
and outbound traffic is shared across all the 
members of the team. And the same traffic 
is shared among the ports on the switch 


used by the port teams. 


The ProLiant Essentials Intelligent 
Networking Pack (INP) enables ProLiant 


servers to adapt and change the network 


rerouting traffic to another port if a 


problem develops on the network The HP N 


business requirements demand IT organizations 
deploy servers that are designed to be powerful, reliable and 
highly available. Leading technologies like redundant Ethernet 
connections, network adapter teaming, memory management 
and Smart Array controllers enable improved flexibility and 
broad software compatibility. These innovations offer IT 
professionals the tools to effectively address high-availability 


platform challenges, both now and in the future. 


64-bit Intel® Xeon™ processorbased platforms are highly 


available. because they incorporate. technologies such as 


redundant DIMMs (dual inline memory modules), memory 





Ethernet and Gigabit E 


170 and NC7170 improve 





high availability building blocks 


net connections. path to help ensure maximum availability. 


INP resides at server nodes and is aware of 


scrubbing and RAID controllers on the 


motherboard. Enhanced Intel SpeedStep® oe 
technology and DDR2-400 memory support , 
help reduce power and cooling costs eae) 


by using advanced power-management 

techniques. Server performance is improved by technologies 
EM64T, 
technology, Hyper-Threading Technology, PCI Express* and 


ire ee Se Enhanced Intel SpeedStep 
Intel NetBurst® microarchitecture 

With a history of technology innovation and a broad base 
of hardware, software and integration leaders, Intel consistently 
delivers enterprise-class performance, quality and availability, 
This approach helps you to build for the future with confidence 


on a platform that evolves as your business grows. 
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the network infrastructure from the first 
tier of switches and beyond. As network 
conditions change, the INP monitors and 
analyzes the network conditions, and 
redirects traffic to the optimum path 


INP offers three key features: actit 





path failover, fast past failover and dual 
channel teaming. Active path failover allows a 
ProLiant server to maintain connectivity 
with the core network even if the link 
between the intermediate switch and the 
core network has failed. When active path 
failover is configured, the ports in a team 
continually monitor for connectivity to the 
core network. The primary path 
automatically fails over to the secondary path 
as soon as it senses a loss of connectivity 

Fast path failover determines the 
fastest path to the core switch to help 
maximize network performance and 
availability by identifying network path 
degradation. For example, fast path failover 
would detect if the Gigabit Ethernet 
connection from an access switch to a core 
switch fails and the traffic is rerouted over a 
100-Mbps Ethernet connection. It would 
then fail the traffic over to an alternative 
Gigabit Ethernet connection 

Dual channel teaming allows system 
administrators to create a team of NICs that 
support, receive and transmit load balancing, 
and provides switch redundancy. This 


combination of capabilities is not available 


with any other team types such as SLB or 
TLB. With dual channel teaming, two Ni¢ 
teams appear as a single connection to the 
server. If one of the switches fails, there is no 
loss of connectivity and the failed switch can 


be replaced without affecting server traffic 


HP's Integrated Lights-out (iLO) technology 
reduces cost and increases server 
availability by giving an IT organization a 
virtual presence within the data center as 
well as on any remote system. That means 
no matter where the server is located, the 
IT organization has control over the key 
system resources such as the console 
keyboard, mouse and power. Using iLO, 
an IT organization even has the ability to 
make storage media appear local to the 
server. In addition, iLO continues to 
operate even if the server's operating 
system is not functioning 

IT organizations can use iLO to install 
configure, monitor, update and troubleshoot 
remote ProLiant servers from a standard web 
browser, command line or script without 
requiring any additional software on th 
client system. iLO is integrated with other 
management tools, making it easier to 
combine virtual presence capabilities with 


other server lifecycle management tasks from 


deployment to ongoing administration 























































ProLiant servers use a variety of techniques 


O protect against errors, and hence 


increase availability. For example, HP was 
yne of the first companies to introduce 
advanced memory protection technology 


such as ECC (Error-Correcting Code) 


memor) nline spare memory, mirrored 


memory and RAID memory in industry 


standard servers 


To improve memory protection even 


further, HP introduced Advanced EC(¢ 





mology. Advanced ECC technology is 

capable of correcting a multi-bit error that 
occurs within one dynamic random access 
memory (DRAM) chip 

The ProLiant server online spare 
memory determines if an active DIMM (dual 
inline memory module) exceeds a predefined 
error threshold. The error will be corrected 
and the data from the entire bank that 
contains the failed DIMM will be copied to 
online spare memory. The failed bank is 
deactivated, but the server will remain 
available until the failed DIMM is replaced 
during a scheduled shutdown 

Whereas online spare memory mode 
protects against single-bit errors and entire 
DRAM failure, mirrored memory mode 


enables full protection against single-bit 


ind multi-bit errors. In mirrored memory 
mode, the same data is written to both 
system memory and mirrored memory 
banks, but data is read only from the 
system memory banks. If a DIMM in the 
system memory banks e xper lences a 
multi-bit error or reaches the pre-defined 
error threshold for single-bit errors, the 
roles of the system and mirrored memory 
banks are reversed 

HP is one of the first companies to 


support hot plug RAID memory, which 
allows the memory subsystem to operate 
continuously even in the event of a 
complete memory device failure. In this 
context, RAID stands for Redundant Array 


rd DIMMs 
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Hot plug RAID memory generates 
parity for an entire cache line of data 
during write operations and records the 
parity information on a dedicated parity 
cartridge. However, hot plug RAID memory 
does not have the mechanical delays of seek 


time, rotational latency and bottlenecks 


associated with disk drive arrays 





There are two types of cooling redundancies 
One allows users to run their server until 
they shut it down and replace the failed fan 
The other maximizes server availability by 
permitting the failed fan to be changed while 
the system is still functioning. 

HP performs hundreds of system tests 
on each of its ProLiant servers. Durir 
these tests, the fans are independently 
stress tested. For greater reliability, only 
fans with ball bearings are u HP servers 
include counter-rotating fans with fixed 
stators, designed to produce greater airflow 
at higher flow impedances and a more 
uniformly directionalized airflow. 

ProLiant servers allow the addition of 
a redundant power supply, or removal of an 
existing redundant power supply for 
servicing at any time without interrupting 
server operation. Having a redundant power 
supply protects the server against the failure 
of a power supply, as well as the failure of 
the AC line cord. When a server is equipy 
with two power supplies, each provides 
approximately half of the power required t 
the system. This helps to reduce component 


stress, which enhances overall reliabilit 


In this context, RAID refers to Redundant Array 
of Independent Disks. RAID technology allows a 
group of disk drives to be tied together to 
function as a single logical disk drive, providing 
increased performance and availability. 

HP’s Smart Array controllers are 
integrated on ProLiant servers, and support 
a variety of RAID types including RAID 
1+0 and RAID 5. Developed and patented 
by HP RAID Advance 
(ADG) is further supported on Smart Array 


ed Data Guarding 


controllers. This technology creates two sets 
parity striped data across the disks to 
help ensure the system can withstand 
multiple disk failures without data loss. 
RAID ADG enables high levels of fault 


tolerance in a cost-effective manner. 
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A RAID array controller will store data 


temporarily in cache memory during data 
transfers. If a power interruption occurs 
after data has been written to cache 
memory and before it is written to a disk, 
the cached data will be lost. To avoid this 


problem, HP’s Smart Array controllers 


ere RAID selection guide 


cost effectiveness > 
performance 


support redundant battery-backed cache, 
providing battery backup for up to four 
days. Once the power has been restored, the 


data in the cache is then moved to a disk. 


Companies of all sizes and industry ty 

are increasingly adopting a non-stop 
approach to business operations. To support 
zations must 


this approach, IT org. 


continually improve component availability. 
HP ProLiant servers are the 
cornerstone of a reliable IT infrastructure. 


When s a server, IT organizations 


should look for features like redundant 
server adapters, and advanced network 
adapter teaming capabilities such as fast 
path failover. 

Highly available servers also require 
functionality such as HP’s industry leading 


memory protection and Smart Array 


RAID ADG 
RAID 1+0 


controllers, as well as advanced cooling and 
power technologies. And remote 
management capability allows the user to 
quickly address server requirements from 
any location. These features ensure that HP 
ProLiant servers provide the availability 


required by today’s business environment. 


HP (NASDAQ “HPQ’) is a technology 

solutions provider to consumers, businesses and 
institutions global 
span IT infrastructure, global services, business 
and home computing, and imaging and printing. 


. The company’s offerings 


Intel (NASDAQ “IN 
maker, is also a leading manufacturer of computer, 
networking and communications products. 


”), the world’s largest chip 


For more information on ProLiant servers and increasing server availability, 
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lumbering giant is an open question. 

In fact, the future of the company 
began fading years ago, when the 
founders and their immediate suc- 
cessors left the scene. HP began los- 
ing its way when it began shedding 
the HP Way. 

The HP Way has been ridiculed in 
recent years, but it meant something 
important. It came from the com- 
mitment of the founders, who knew 
that the core of their company was 
a purpose, something more holistic 
than Wall Street’s simple and craven 
hungers. They believed, more than 
most tycoons, that a company exists 
not just for its shareholders, but also 
for its employees and the communi- 
ties in which the company does busi- 
ness. There was a humanistic bent to 
their approach. 

HP people were part of a corpo- 
rate culture that frequently made 
them proud. It also made them loyal. 
Silicon Valley communities, and oth- 
er places where the company had fa- 
cilities, felt the benefits. 

Under Fiorina, the HP Way was 
viewed as a vestige of a more naive 
time, an outmoded and even coun- 
terproductive way of doing business. 
And as the company shed its more 
humane ways, its employees and 
communities felt that process too. 

HP didn’t dump everything of val- 
ue. And the company still has thou- 
sands of people who try every day to 
do their best, for their colleagues 
and for their neighbors. But the cul- 
ture that meant so much for so long 
has faded. That has been a great loss. 

One school of modern thought 
holds that we live in a time when hu- 
manistic concerns are irrelevant to 
corporate life or are even a detriment 
to success. The HP that embraced 
more positive values has changed. 
But that HP is also missed. @ 52860 


High-hanging 
Fruits Worth 
The Risk 


F THERE’S A common 
thread running through IT 
leadership today, it’s the 


| 


avoidance of risk. This 
attitude just reinforces 
Nicholas Carr’s argument 
in his book Does IT Mat- 
ter? that all of information 
technology is a commodi- 
ty. Where organizations 
make a difference, though, 
is at the margins, where 
risks are higher but so are 
rewards. We’ve picked the 
low-hanging fruit. Who 
will climb the ladder to go 
after the ripe opportunities at 
the top? 

Four years into the budget belt- 
tightening, you feel pretty good 
about yourself. You’ve managed to 
trim the fat and get projects under 
control. Your clients are generally 
happy. You’re being asked to get in- 
volved in redesigning parts of the 
business like end-to-end processes 
and call centers. 

Meanwhile, some of your peers are 
putting themselves on the CEO fast 
track. The game is afoot: Careers are 
being made in 2005. But much will 
depend on whether you reach for the 
higher-hanging fruit. 

Last year, Meta Group conducted 
two multiclient studies, one on CIOs 
as corporate change agents and one 
on the perception of value from IT 
investments. In both studies, CEOs 
repeatedly came forward banging 
the innovation drum. They were 
generally frustrated by the response 





from their management 
teams: more process tun- 
ing, more cost manage- 
ment, more of the same. 
They complained that 
few business leaders were 
stepping up to the chal- 
lenge of inventing the 
future. 

Some chief information 
officers have recognized 
that, despite its inclusion 
in their titles, information 

is in short supply. It doesn’t matter 
how much data you have — or how 
easy it is to get to — if the informa- 
tion needed to seize opportunities 
isn’t present when you need it. If 
the claim that we don’t have infor- 
mation boggles your mind, ask your- 
self how easy it is to determine 
whether a customer is truly prof- 
itable and influential or whether a 
supplier has untapped capabilities 
that are worth getting access to with- 
out forcing it to cut another penny 
on unit costs. These are just two 
ways to say who matters in a busi- 
ness and service sense. 

Innovation through information is 
good, but the road ahead has a few 
bumps in it. 2005 is a year of getting 
ready — we see steps being taken to 
prepare for future risks and move 
speedily in 2006. 

First of all, savvy CIOs are making 
sure their IT organizations have the 
required skills, mind-sets and leader- 
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ship traits to handle and manage 


riskier ventures in-house. Consul- 


tants and packages won’t create a 
high-reward future. 

Second, they are honing their or- 
ganizational skills in envisioning the 


| future, from developing scenarios 
| around common requirements vi- 
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sioning to looking for ways to exper- 


| iment cheaply and productively. 
| There’s a reason the CIOs’ business 
| peers haven’t responded innovative- 


ly themselves, and the fast-track 
CIOs are closing the gap to create 
joint successes. 

Lastly, they’re learning through 
the process redesign and reinven- 
tion assignments they’ve been given 
where the business could be im- 
proved, but they’re working to shed 
their process myopia. New business 
lines are formed, after all, from use- 
ful functions, not a focus on process, 
and they need to tighten their fit to 
the market. 

Are you able to step up and deliver 
growth? Cost management won't go 
away — process redesign (the mark 
of mature businesses) will remain 
important. But even one or two high 
fruits, selected for potential payoff, 
will make the difference when the 
CEOs of 2010 are picked! @ 52735 
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Fill That Jump Bag 


WO MORE THINGS to put in 

a “jump bag” for an emergency 
response to a network attack: a 
camera, and tape or sticky labels 
for sealing evidence [“Fill Your 
Jump Bag,” QuickLink 51714). 
Gary Hinson 
CEO, IsecT Ltd., London 


Counseling Carly 


| "VE NOW SEEN two articles 

in Computerworld attributing 
the ouster of Carly Fiorina from 
Hewlett-Packard to her inability - 
or unwillingness - to set HP on a 
course to follow IBM's model. Who 
said she should? This sounds like 
orthodoxy to me. | have no opinion 





| 


on Fiorina one way or another, but 
blaming her for not following an ex- 


isting model sounds to me a perfect 
| example of an all-too-common 
| business strategy - following a 


model that grew out of an older, dif- 
ferent set of conditions rather than 
deriving a new plan based on the 
current environment. 

Daniel R. Flasar 

Informatics core manager, 


| Washington University, 


St. Louis, drfltrs@aol.com 


Managing Mergers 
ITH REGARD to the article 
“Mechanics of a Merger” 

[QuickLink 52257], one thing really 

irks me. That is ClO Tyler Best's ac- 

tion of arbitrarily firing the entire IT 





departments of both companies 
that merged to form ANC Rental 
Corp. It seems that rather than take 
the time to determine which individ- 
uals were responsible for the in- 
effectiveness, he felt it was easier 


to blame everyone. | am sure he cal- 


lously caused undue hardship to 


| Many talented and previously faith- 


ful employees. It is a sad statement 
on how management thinks. 
Melvin Davidson 

Unemployed, Selden, N.Y., 
melvin695@earthlink.net 


LOVE THIS STORY. Clean house, 

fire employees, reduce expenses, 
make the stock go up. This is the 
management of today! | guarantee 
that if either Alamo or National isn’t 
the cheapest rental car company 


|_ in the world, it will never get my 
business. 

Harry Bunting 
Hardwareoftware engineer, 
Palo Alto, Calif, 
HarryB2378@aol.com 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity 
They should be addressed to 
Jamie Eckle, letters editor, Com- 


| puterworld, PO Box 9171, 1 Speen 


Street, Framingham, Mass. 01701 
Fax: (508) 879-4843. E-mail: 
letters@computerworld.com. 
Include an address and phone 
number for immediate verification. 


For more letters on these and 
other topics, go to 





www.computerworld.com/letters 
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SAS software delivers one powerful: business intelligence and.analytics platform for 





return on intelligence — in tess time. For nearly 30 years. SA is been helping companies ga 
to: their most pressing busine juestians and: address the t challenging issues...takir 
Beyond BI. Find out why 94 if the FORTUNE Global-500 ' re AS +o increase profits, reduc: ts 5 


manage risk and. optimize-perfort 


www.sas.com/value 
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Reaching Out 
Outsourcing, open-source 
and the commoditization of 
information technology are 
all trends that will push IT 
outside the boundaries of 


the 


organization. Page 28 
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What does the future hold for IT? We thought the best 
way to answer that question was to ask the experts, 
so we sought out the views of a baker’s dozen of IT 
visionaries that includes university professors, CIOs, 
IT consultants and a software vendor researcher. 

We did not ask our panel about technology per se 
— when we will see quantum computing, what the 
future of microprocessor architectures is and so on. 
Rather, we sought their views on the economics 
and delivery of IT. What's the future of open-source 
software, utility computing, application services 
and software license practices? What will happen in 
outsourcing and offshoring, and how will the IT 
that stays in-house change? How will the ven- 
dor landscape evolve? And what does it all 
mean for the IT manager? 

We also asked our panelists what worries 
them (answer: a lot) and what advice they'd give 
IT managers to help them navigate the coming 
decade. Advice ran the gamut from how much to 
budget for research to how to beat the competition. 
One panelist outlined six software development 
best practices, while another gave reasons why you 
should cut out the cost-cutting mind-set and bone 
up on anthropology and sociology. 

IT consultant Paul A. Strassmann compared 
today’s IT shops to “medieval guilds” for their 
do-it-all mentalities, but all of our prognosticators 
said that will change dramatically in the years 
ahead. And, although CIO André V. Mendes said 
the CIO will disappear as a separate breed of man- 
ager, no one said IT would stop being important. 

Harvard Business School professor F. Warren 
McFarlan put it this way: “An article appeared a year 
and a half ago in the Harvard Business Review — ‘IT 
Doesn't Matter. But IT is going to be much more 
important, much deeper, much more powerful over 
the next 20 years. The notion that this is becoming a 
commodity, back-office utility couldn’t be further 
from the truth.” @ 52738 — Gary H. Anthes 
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The Vendor Scene: 
Giants in Jeopardy 


The Dark Side 


All will not be rosy in the 


Smaller, more agile vendors future of IT. Our panelists 

pose a threat to the dominance see no quick end to the plagues 
of the larger players, but don’t of shoddy software, security 
expect a rapid revolution, say breaches and unmanageably 


our panelists. Page 32 
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complex systems. Page 36 


A panel of IT visionaries and 


provocateurs polish up their 
crystal balls and look to the future. 
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Reaching Out 


As their options multiply, companies wil 
increasingly look beyond the boundaries of their 
own organizations to procure IT. By Gary H. Anthes 


a 


NUMBER OF EXISTING 
trends will accelerate 
and converge to funda- 
mentally change the 
way companies 
procure IT, in 
essence 
pushing 
much 

of IT out the door. The 

Computerworld panelists say open- 

source software will proliferate — but 

not everywhere — and applications 
will increasingly be purchased as ser- 
vices from external parties, allowing 
some companies to scrap their data 
centers entirely. Offshoring of IT will 


PANELISTS 


Our pane! comprises 

a diverse group of 

academics, researchers, 

analysts and ClOs. What 

they have in common is a 

long history of observing 

IT trends and making 

connections to the 

industry's future. economist, Santa Fe 
Institute. He has written 
extensively about the 
evolution of economies, 
including that of the 
high-tech era. 


JN 


@ Michael H. Hugos, | & Thomas Malone, @ Thornton May, fu- 
ClO, Network Services | professor of manage- turist and dean, IT Lead- 
Co., Mount Prospect, Ill. ; ment, MIT Sloan School 4 ership Academy, the Uni- 
He has more than 20 1 of Management, Cam- versity of Florida, Jack- 
years of experience in  ! bridge, Mass. He was a sonville. He has written 
corporate IT and is a 1 co-founder of the MIT about the future of IT for 
Computerworldcolum- — ° initiative “Inventing the numerous publications 
nist. y Organizations of the 21st andis a regular Comput- 
§ Century.” erworld columnist. 


@ Frank Gens, senior 
vice president for re- 
search, IDC, Framing- 
ham, Mass. He's the au- 
thor of IDC’s “Executive 
Insights,” a monthly ex- 
ecutive brief on the state 
and future of the IT in- 
dustry. 


@ Gordon Bell, senior 
researcher, Microsoft 
Research. He was for- 
merly vice president of 
engineering at Digital 
Equipment Corp. 
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increase, but changing labor and pro- 
ductivity rates will swing the pendu- 

lum back in favor of in-house systems 
development for some companies. 


Riding the Open-Source Wave 
Open-source software will become 
pervasive for core computing and busi- 
ness applications — everything from 
basic operating and telecommunica- 
tions systems to accounting, inventory, 
contact management and personal pro- 
ductivity applications, predicts Net- 
work Services Co. CIO Michael H. 
Hugos. “The spread of Linux and 
open-source software is ending the 
need to standardize on any one ven- 
dor’s software,” he says. 

Like other developments predicted 
by our panelists, this one : will be influ- 
enced by forces abroad. “In Asia, you 
are going to see a great deal more 
[open-source] encouraged by the 
Chinese because they don’t want their 
army or their government held hostage 
to Microsoft,” says Harvard Business 
School professor F. Warren McFarlan. 

Christopher Meyer, chief executive 
of Monitor Networks, agrees that 
open-source will continue to grow in 
importance and says that China will be 
a major reason. “Established software 
vendors will be unable to make their 
pricing policies stick there,” he says. 


Commodity IT 
“Freeware” will drive prices down, 
says Don Tapscott, president of New 
Paradigm Learning Corp. “Now that 
Wal-Mart is selling a stripped PC for 
$300 — that you can load with Linux, 
Firefox and OpenOffice — it will accel- 
erate the use of open-source software.” 
But will those Wal-Mart boxes find 
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their way into businesses? “The aver- 
age North American corporate desktop 
doesn’t seem ready for a Linux-based 
PC yet, mostly because MS Office has 
such a huge installed base and because 
minute but annoying incompatibilities 
between OpenOffice and other MS 
versions will not make these savings 
‘apscott says. “But I 
think the invasion of low-cost PCs is 
inevitable.” One impediment to desk- 
top Linux adoption will be corporate 
lawyers worried about the legality of 
the software, he adds. 

Some clever hybrid approaches may 
become popular, some say. As open- 


| source becomes prevalent, current 


licensing terms may give way to a digi- 
tal rights management approach that 


| keeps some rights reserved, like that 
| supported by the nonprofit copyright 
| group Creative Commons, Meyer says. 


| producers,” he s 


| characteristics of open-source. 
| stance, Asynchrony Software pioneered 
| a model where self-organizing teams of 


wuhcaaiiicak atabiane 
most have done, of for IT services like disk 
storage or transaction processing, as 
some are starting to do. Rather, they'll be 
looking for business results, he says. 


aininien cliente 
technology components that impact that. 
“Ammaipr sucones aitver for tre IT com- 
munity will be the from 
iechdiogp hs bectinbeandortnnlness 
to technology,” May says. 
- Gary H. Anthes 


“That approach would, like iTunes, 
institutionalize, standardize and legit- 
imize sharing of software and ensure 
appropriate control and rewards for 
ays. 

Thomas Malone, a professor at 
MIT’s Sloan School of Management, 
says software development efforts will 
likely gain some — but not all — of the 
“For in- 


programmers from all over the Net de- 
velop software products together,” he 

says. “But they don’t do it for free; they 
each get a share of any eventual royal- 


| ties from the sale of the products.” 


| Not So Fast... 


Other panelists are decidedly less en- 


| thusiastic about open-source software, 
| at least in some applications. 


“You can- 
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not assure high levels of reliability 

from systems built exclusively by vol- 
unteers,” says Paul A. Strassmann, the 
forme 


r top IT manager at the Penta 


gon. “I admire open-source software 
as a means for innovation, but not for 
delivering the infrastructure for an 
information-based civilization.” 

The quality of open-source software 
varies, and open-source is often little 
more than a backlash against Micro- 
soft, 
Bell. “Many things in the world that 
are ‘free’ 


says Microsoft researcher Gordon 
come at substantial cost 
‘free’ like a puppy.” 
Bell warns that “ 
number of meanings, depending on the 
“For 
example, Linux started out as some- 
thing that meant free, but now suppli 


open-source” has a 


goals of the providers and users. 


ers are focusing on some advantage 
and uniqueness for each marketplace,” 
he says. “It remains to be seen whether 
Linux will fragment in the same way 
that Unix dialects formed, which pre- 
vented the formation of a healthy in- 
dependent software vendor industry.” 


IT: Buy It by the Yard 


Utility computing — in which users 
buy IT resources such as storage, com- 
pute cycles or application services as 
though they were electricity — is no- 
thing less than “the future of comput- 
ing,” Strassmann says. “The idea that 
each organization must invest in its 
own infrastructure, custom applica- 
tions, unique data definitions, and lo- 
cation-specific software and hardware 
is economically not sustainable. Only 
medieval guilds are comparable to the 
structure of existing IT organizations.” 
David Moschella, global research di- 
rector at CSC Research and Advisory 


@ F. Warren Mc- 
Farlan, Baker Founda- 
tion professor, Harvard 
Business School. He 
has been instrumental in 
incorporating the study 
of information systems 
into the business 
curriculum. 


vice president and chief 
technology integration 
officer, Public Broadcast- 
ing Service, Washington. 
He has training in the 
biological sciences and 
says principles of biology 
can be applied to IT. 


@ Christopher Meyer, 
chief executive, Monitor 
Networks, a Monitor 

Group company, Cam- 
bridge, Mass. He’s co- 
author of It’s Alive: The 
Coming Convergence of 
Information, Biology, and , 
Business. 1 


@ David Moschella, 
global research director, 
CSC Research and Advi- 
sory Services, a Comput- 
er Sciences Corp. com- 
pany. He’s also an author 
and a regular Computer- 
world columnist. 


a 

@ Howard A. Rubin, 
senior vice president, 
Meta Group Inc.; profes- 4 
sor emeritus of computer 
science, City University 
of New York. He's the 
author of “WorldWide IT 
Trends and Benchmark 

1 Report.” 


@ Paul A. Strass- 
mann, researcher and 
author. He has served as 
1 ClO at several Fortune 

¥ 100 companies and fed- 
1 eral agencies, and he 

1 wrote /nformation Pro- 

: ductivityand The Squan- 
§ dered Computer. 


@ Don Tapscott, 
president, New Paradigm 
Learning Corp., Toronto. 
He’s co-author of 

The Naked Corporation: 
How the Age of Trans- 
parency Will Revolution- 
ize Business. 
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RULES FOR SMART COMPANIES 
As IT labor rates rise overseas and fall or 


remain constant in the U.S., the financial 
advantage cf offshoring will shrink and 


ereuenbies tower tet 
it will work as expected. 
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Services, says the utility model is al- 
ready here. “It’s what most consumers 
and small businesses already do as they 
use and sometimes even pay for Web- 
based or mobile services,” he says. 

Large businesses will follow suit, he 
says. “Too many IT organizations are 
currently drowning in low-value IT 
work,” Moschella says. “Only by using 
more-standardized, [utility-style] ser- 
vices can companies redeploy their re- 
sources to focus on things that can de- 
liver unique business value.” 

And running computers isn’t one of 
those things, McFarlan says. “Data cen- 
ters a decade from now will be gone. 
You'll be using a combination of appli- 
cation service providers and third par- 
ties for security and backup and so 
forth,” he says. China will be an impor- 
tant player, McFarlan predicts. And, he 
says, an entire industry will spring up 
that’s focused on very high reliability, 
redundancy and security. 

André Mendes, vice president and 
chief technology integration officer at 
Public Broadcasting Service, says that 
standardizing things such as wiring, 
network protocols, desktop hardware 
and operating systems, e-mail clients, 
server hardware and databases has 
boosted efficiency in his IT shop a 
great deal over the past five years. 

“The next steps involve the out- 
sourcing of all of these services to 
companies whose core competencies 
focus on the 99.999% availability that I 
need, but at a much lower cost,” he says. 

“The first part that’s easy to do is 
storage, then computing cycles,” says 
Mendes. “And once that’s done on a 
subscription basis, then there’s stan- 
dardization at the application level.” 

Will Mendes eventually close his 
data center? “Absolutely. I think that’s 
actually necessary,” he says. “There will 
be companies that specialize in ultra- 
high security and reliability. It’s going 
to be more and more expensive to have 
that in-house, and with that expense 
comes additional liability. At what 
point do you outsource that liability 
to someone who does it for a living?” 

Users will benefit from utility com- 
puting’s simplified pricing, Hugos says, 
and that will bring with it less-onerous 
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GROWTH GOES TO OUTSOURCING 


Outsourcing will capture most of future increases in global IT services spending. 


2003 
$1.1 trillion 


2008 
$1.3 trillion 


Projected compound annual growth rate, 2003-2008: 


Internal services: 0.4% 


SOURCE: GARTNER INC., STAMFORD, CONN 


licensing terms. “Licensing will be- 
come simple annual payments based 
on the number of users or transaction 
volumes that a company has. Enforce- 
ment will be largely voluntary because 
the annual payments will be low and 
the software vendors will have easy 
ways to audit a company and find out 
if they are in compliance or not.” 
Utility computing will gain ground 
first inside companies as a way to 
make more efficient use of their own 
resources, Tapscott says. “Then, once 
they have their internal utility archi- 
tecture, it only makes sense that they 
can plug into outside utility computing 
resources when they need it,” he adds. 
But Meyer says he doubts that it will 
become commonplace for companies 
to buy raw processing power like they 
buy electricity. “The communications 
and coordination costs will swamp the 
hardware costs,” he says. “But there 
will be applications in very computing- 
intensive applications, like meteorolo- 
gy and animation, in which cycle-grab- 
bing will be an attractive solution.” 


Meanwhile, Offshore. . . 


Procuring IT from abroad will become 
so common, panelists say, that a broad 
array of IT services will be available 


THE BOOM IN ENTERPRISE LINUX 


Projected worldwide Linux operating environment 
new license and upgrade/maintenance revenue, 2001-2008 


ROAR EAB ea 
Revenue (SM) $825 $893 $1297 $1838 $248 $3199 $402.2 $4928 


Growth(%) NA 8.2% 


SOURCE: IOC, NOVEMBER 2004 


45.3% 41.7% 


Compound annual growth rate, 2001-2008: 30.6% 


34.9% 29% 25.8% 22.5% 


Discrete IT services: 3.9% Outsourced total: 7.9% 





IT services total: 6% 


around the world, almost like a futures 
market where labor is readily bought 


| and sold, or “arbitraged,” on the basis of 


small differences in price and quality. 
“The software industry will become 

completely global,” Meyer says. “Sourc- 
ing of talent will become efficient 
enough that deviations of price from 
value will be arbitraged. Today, superi- 
or software people move to where they 
can get paid what they are worth, but 


| tomorrow they won't have to.” 


Competitive pressures will force 
companies to turn to global labor mar- 
kets, McFarlan agrees. “Fiber optics 
basically allows us to arbitrage labor 
markets that used to be distinct from 
each other but are now absolutely con- 
nected,” he says. 

Offshoring has so far been driven 
mostly by efforts to lower costs and 
make them more manageable, says 
Moschella. “But increasingly, cus- 
tomers are looking to their outsourc- 
ing partners to help them in areas such 
as innovation, agility, value and even 
transformation,” he says. “The focus of 
the outsourcing industry over the next 
five years will be on improving their 
ability to be true business partners 
with impact far beyond cost control.” 

And that shift will have a profound 
effect on outsourcing practices, says 
Sloan’s Malone. “Eventually, all the op- 
portunities to gain from shifting work 
to low-wage countries will have disap- 
peared because the low-wage coun- 
tries won't be so low-wage anymore,” 
he says. “When that happens ... differ- 
ent companies, and countries, will be- 
come experts in providing different 
kinds of services and products.” 


@ 52743 
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BUSINESSES RUN SAP 


The North Face needed a faster way of keeping up with demand. So they enhanced their supply chain 
with solutions from SAP. Now they can share real-time inventory and procurement information across their entire organization, 


improving delivery time from days to hours. For more information, visit sap.com/scm or call 800 880 1727. 
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THE VENDOR SCENE: 
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It would be foolhardy to underestimate the staying power 
of companies like Microsoft, but smaller, more agile 
players pose a serious threat. By Gary H. Anthes 


ICROSOFT’S GLORY DAYS are, if not 
behind it, at least numbered, accord- 
ing to most of the Computerworld 
panelists. And that probably goes 
for the other goliaths of IT as well. 
But even though our seers predict a 
less-prominent position for the in- 
dustry big guys, don’t expect more 
agile players to whittle them down to size very 
quickly, say our panelists. 

“Microsoft has already defied the odds once by stay- 
ing a dominant player as the computer industry made 
a major technological transition in the late 1990s from 
the PC era to the Internet era,” says Thomas Malone, 
a professor at MIT’s Sloan School of Management. 
“It’s not impossible for Microsoft to do this again, 
with whatever the next major technology turns out 
to be, but I’d have to say the odds are against it.” 

But panelists don’t agree on just what Microsoft’s 
biggest challenge is. For IT consultant Paul A. Strass- 
mann, the company’s business model just isn’t suited 
to the 21st century. “Microsoft enjoys astronomic prof- 
it margins selling software wherein the customer 
ends up spending a large multiple of the purchase 
price and incurs all of the risks,” he says. “Google, be- 
cause of their architecture, can introduce innovations 
much faster than Microsoft, which is now hobbled 
with a huge accumulation of hard-to-upgrade code.” 

IT futurist Thornton May agrees, saying the Mi- 

crosoft economic model is outdated. “Microsoft is 
running out of rich, dumb customers,” he says. ,. 
“If you are technologically smart, you can 
replicate 80% of the functionality of Micro- 
soft Office essentially for free.” 

The company has two 
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monkeys on its back, says Don Tapscott, an author 
and president of New Paradigm Learning Corp. The 
first is the high expectations of shareholders. “A 


| company of Microsoft’s size has to continue to domi- 


nate new multibillion-dollar markets just to meet 
these expectations, so just finding new areas for 
growth will be a major challenge,” he says. “The 
second challenge comes from networked/pervasive 
computing. The desktop and operating system are 
no longer the center of the electronic universe.” 

And David Moschella, research director for CSC, 
sees Microsoft enemies everywhere. “The combina- 
tion of open-source software, ASP services such as 
Google, an increasingly hardware- and operating-sys- 
tem-neutral Internet and the emerging global econo- 
my all work against Microsoft’s once overwhelming 
dominance,” he says. “Linux has effectively ended 
the threat of a server monopoly, and Microsoft’s 
share in new consumer device- and Internet-based 
services markets is not strong. And emerging econ- 
omies such as China and India are not inclined to 
make themselves part of the Microsoft empire.” 

Microsoft’s strength has been a good thing until 
now because it established de facto standards, just 
like the IBM PC before it, says Michael H. Hugos, 
CIO at Network Services Co. “But like IBM, Micro- 
soft will gradually see its market share eaten away by 
less- expensive, less-complicated, more-responsive 
alternatives that use the Microsoft standards in areas 
like the user interface, program APIs and so on.” 

Having fended off government attempts to 
break it up, Microsoft now ought to break itself 
up voluntarily, says Hugos. “The present Micro- 


set that they acquired during their heyday in the 
1990s. If it remains in its present mind-set, Microsoft 
will wind up on the defensive everywhere, as in, 
‘Windows is cheaper to run than Linux,’ ‘We can do 
search too just like Google,’ ‘We can make PDAs and 
iPods just as well as the next guy,’ and so on.” 

Microsoft’s enormous momentum can still carry it 
far, Moschella says. “Don’t feel too sorry for Micro- 
soft; its position in its core markets and vast cash re- 
sources should guarantee healthy financial results 
for many years to come,” he says. 

And, IDC analyst Frank Gens points out, “a lot of 
people have lost a lot of money shorting Microsoft 
over the past 20 years. They are almost religiously 
bound to a single-stack philosophy and product line. 
That has limited their degrees of freedom, by their 
own choice. But [Microsoft is] also one of the 
smartest companies out there.” 

When the time is right for Microsoft to move to 
a new business model, it will do it, Gens predicts. 


Elsewhere on the Vendor Front . . . 


Microsoft isn’t the only giant surrounded by threaten- 
ing Lilliputians, the panelists say. “There already 
is a mature market of 90s-style ERP systems 
dominated by companies like SAP, Oracle 
and a few others,” Hugos says. “But ... 
those companies are not serving growth 
markets. The growth markets belong to 
those furry little mammals that are scurry- 
ing around eating the dinosaurs’ eggs while 
the dinosaurs are out fighting with each other.” 
Continued on page 34 
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Continued from page 32 


André V. Mendes says he’s not ready to write off the | 


big vendors. “These people are very, very bright, and 
they understand the endemic nature of change,” says 
Mendes, a vice president at Public Broadcasting Ser- 
vice. “They have the ability, by virtue of their cash 
flow, to fund R&D that allows them to stay on top.” 

The IT vendors that prosper in coming years will be 
those that can keep moving into noncommodity mar- 
kets, says Mendes. “Commoditization of IT will move 
higher and higher up the hardware/software/applica- 
tion stack, forcing companies like Microsoft to focus 
higher and higher on the stack as well,” he says. 

That move up the stack will be good for users, says 
Gens. “Both enterprise customers and vendors are re- 
alizing that if everything is presented as just a bunch 
of piece parts, and we depend on the integrators to 
make sense of it and turn it into business value, it 
just slows things down. So we'll raise the level of 
where we are integrating above the low-level, arcane 
technologies to some good, stable, high-performance 
platforms. Vendors will create a much wider variety 
of deep, verticalized applications.” Standard develop- 
ment platforms like .Net, J2EE and Web services will 
make it affordable for vendors to do that. “All the 
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Gordon Bell, senior researcher at Microsoft, isn't flus- 
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that his company is t very much open software. [You] can outsource this to someone 


terad by fellow panolists’ predictions 

headed for decline. Microsoft benefits from competition from 
upstarts like Google, because, as it has demonstrated in the past, | 
it“seems to be able to consider every company a competitive 
threat or opportunity to work with,” he says. “I believe this makes 
"tes ce eibens tsa neraeae 


have to create themselves, they can just assume it’s 
there,” Gens says. “So customers will see a packaged 
application market, but it will be a much richer one.” 
Moschella sees an even more profound change in 
the vendor landscape. “As IT spreads into ever-more- 


et cena 

Microsoft's dominance 

' says. “Microsoft pioneered the high-volume software made! 

; based on serving tens of milions of users. High volume is the 
fe eecenese 


increasingly difficult to say who is an IT vendor and 
who isn’t,” he says. “Consider Wal-Mart in RFID, Star- 
bucks in wireless, Amazon in Web services. One can 
| argue that the number of IT companies will actually 
| start to expand rapidly, since these days, almost every 


underpinnings that an application developer would _| specific business products and services, it will become | company is an IT company to some extent.” @ 52764 


Suffering from Data 
Backup Trauma? 


Check out the hilarious new online video: 


THE INSTITUTE FOR 


“eee* 4 Stars!” 
Tape Backup 
Trauma Times 


Weck (Cleese) takes you on a tour of his 
dedicated to the treatment and prevention Ft 
tragedy called Backup Trauma (BT). Co-starri 
Michael Dorn. 


“1 laughed, i cried. 
| called my vendor.” 
IT guy named Fred 


ran 


“3 Thumbs Up!” 
Recovery Failure 
Monthly 
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First 10,000 viewers get a 
featuring John Cleese - a true collector’s item! 
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Network Management/ 
IT Automation 


and the Agile Enterprise: Tools to Bridge the Gap 


hat ultimately makes an agile enterprise agile? The sudden realization 
there's a dangerous gap between what the enterprise expects and 
the management tools you need when a new opportunity looms 


Or growth is rapid. Or a crisis strikes 


Will you be ready? Attend Network Management/IT Automation and the 
Agile Enterprise: Tools to Bridge the Gap, a new Network World Technology 
Tour Event and Expo. Get a roadmap for the 12 months ahead. Hear advice 
from expert colleagues. Learn about the latest tools, technologies, and best 
practices for successful network management. Qualify to attend and you'll gain 
a years worth of responsive, reality-based solutions with practical know-how all 


in one day. Register now. While this event is free to professionals, space is limited. 


Register now at www.nwfusion.com/NMW5A4 
or call 800-643-4668 
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__THE FUTURE OF IT 
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The future may hold bad 
software, ever-more- 


dangerous security threats 
and a host of other causes for 
concem, say our panelists. 


By Gary H. Anthes 


UR PANEL finds plenty to worry about, 
from the sometimes deplorable quali- 
ty of commercial software to cyber- 
crimes and an erosion of U.S. leader- 
ship in IT. Leading the list of concerns 
— perhaps because it’s so trouble- 
some today — is the software quality 
issue, with its evil triad of poor secu- 
rity, unreliability and complexity. 

Easy, trouble-free use of IT has moved to the top of 
users’ wish lists, some say. “It’s not much use making 
the digital technology better, cheaper, faster; that’s 
going to happen in any case,” says economist W. 
Brian Arthur. “Computers are working about as fast 
as we need. The bottleneck is making it all usable.” 

Panel members rounded up the usual suspects. 
“The purveyors of this complex and unreli- 
able software are the current big software 
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vendors,” says Network Services Co. CIO Michael H. 
Hugos. “We all deal with some of them on a daily ba- 
sis, and everyone knows who they are, including the 
vendors themselves.” 

But a day of reckoning is coming for these vendors, 
Hugos and others predict. “There is a great pent-up 
demand for alternatives, and now, thanks to open- 
source software and commodity IT platforms, there 
are beginning to be industrial-strength alternatives to 
the products of the big software vendors,” Hugos says. 

Not surprisingly, Microsoft researcher Gordon Bell 
refuses to take the vendor-bashing lying down. Says 
Bell, “We are trying to address the product part of se- 


| curity and unreliability through the Trustworthy 


Computing initiative that Bill [Gates] launched al- 

most five years ago. So far, it has impacted virtually 
every part of the company, ranging from the way it 
develops software to the product itself.” 


So, What Will Users Do? 


Users historically have not insisted on performance 
guaranties and warranties from vendors, but the evil 
triad will propel them to do just that, some predict. 
“With enormous competitive pressures on profits, 
the smart customers will take their business to where 
they can get performance warranties and operating 
simplicity,” says IT consultant Paul A. Strassmann. 
Meta Group analyst Howard A. Rubin says that ap- 


| plication service providers and other third parties 


will be better able to deal with issues of security and 
reliability because of their economies of scale, and 
they will be forced into offering guarantees. “Cus- 
tomers will start to measure software quality and 
the costs of poor quality and will write penalties into 
contracts,” he says. “Product liability will start to 
have real legal teeth.” 
Meanwhile, end users will take matters 
into their own hands, says David Mosch- 
ella, research director for CSC. Compa- 
nies’ employees are growing in- 
creasingly sophisticated in their 
use of IT, and they will no longer 
always look to corporate IT for 
help, he says. “Instead, they will 
look to the Internet and wireless 
worlds and will find an abun- 
dance of inexpensive and easy- 
to-use services. Over time, 
many of these offerings will 
be competitive and even 
: superior to the offer- 
Mision ings of corporate 


TT IT.” @ 52766 
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More to 
Fret About 


Just as the future is rich in the variety 
of opportunities it affords, the anxieties of 
our panel members took many forms. 


@ “Issues of information security, cyberterrorism 
and the loss of U.S. technology leadership to rapidly 
emerging competitors.” - Paul A. Strassmann 


@ “That IT will be dominated by a few large vendors, 
such as Microsoft, SAP and Oracle, and innovation 
and creativity will be stifled.” - Michael H. Hugos 


@ “That CXOs, still cynical and cautious from the 
post-dot-com, tech depression, bear market, 

global recession, post-9/11 and Enron business 
environment, will continue to be dazed and confused 
about the role of IT in competitive advantage. This 
environment creates a strategic danger for every 
company. IT is not decreasing in importance; it's 
growing as the corporation goes through the biggest 
changes in a century.” - Don Tapscott, president, 
New Paradigm Learning Corp. 


@ “About the U.S. being able to produce enough 
scientists and engineers to compete effectively. Also, 
I'm worried about 1) Internet meltdown that causes 
serious economic disruption and causes people to 
distrust IT and go back to ‘safe’ methods, 2) a 
serious attack on cyberinfrastructure (not just 

hoods and punks - real war), and 3) an erosion of 
intellectual property rights in Europe and Asia that 
kills the software industry.” - Gordon Bell 


Threats to 
Information Security 


What is the single greatest threat to your 
company’s enterprise network 
a & : ne, ie ; 
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(percentage of respondents) 
Base: 606 respondents 


SOURCE: IDC, “WORLDWIDE IT SECURITY SOFTWARE, HAROWARE 
AND SERVICES 2004-2008 FORECAST.“ 2004 
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ORACLE USERS 


Before developing your next generation of 
applications, switch from Oracle® to the next 
generation of database technology. 

Caché is the post-relational database that com- 
bines high-performance SQL for faster queries and 
an advanced object database for rapidly storing and 
accessing objects. With Caché, no mapping is 
required between object and relational views of data. 
That means huge savings in both development and 
processing time. 

Applications built on Caché are massively scalable 
and lightning-fast. Plus, they require minimal or no 
database administration. 

More than just a database system, Caché incor- 
porates a powerful Web application development 


environment that dramatically reduces the time 
to build and modify applications. 

Caché is so reliable, it’s the world’s leading 
database in healthcare and it powers enterprise 
applications in financial services, government and 
many other sectors. With its high reliability, high 
performance and low maintenance, Caché delivers 
your vision of a better database. 

We are InterSystems — a specialist in data 
management for over twenty-six years, providing 
24x7 support to 4 million users in 88 countries. 
Caché is available for Windows, OpenVMS, Linux, 
Mac OS X and major UNIX platforms, and it is 
deployed on systems ranging from two to over 
50,000 simultaneous users. 


InterSystems 
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Make Applications Faster 


Try a better database. For free. 


Download a free, fully functional, non-expiring copy of Caché or request it on CD at ww 
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HE UNITED WAY of Metropolitan Atlanta recently 

faced an integration problem that’s all too famil- 

iar to IT managers. The charity, which provides a 

variety of services to over 4 million children and 

adults, needed to provide fund-raising can 

workers with a uniform view of the information it had on its 

ors and aid recipients. Unfortunately, that information 
scattered across three applications. 

“Our campaign people would have to look into several d 
ferent databases and have two or three different windows 
open, trying to match the various fields of information they 
needed to get a 360-degree view of our donors and volun- 
teers,” explains CIO Elaine Mitchell Norman 

But while the organization’s experience is fairly common, 
the method it chose to solve it isn’t. Instead of coding or pur- 
chasing a new application or attempting to use an é rprise 
application integration (EAI) or data integration system on 
the back end, the United Way opted for a front-end approach. 

First, it replaced its contact management software with a 
sales force automation system from application servic 
provider Salesforce.com Inc. Then it used Above All Studio, 
an integration tool from Above All Software Inc. in San Ma- 
teo, Calif., to link information and functions from other appli- 
cations into an overlay interface for Salesforce.com. Above 
All’s graphical user interface, which enables semitechnical 
users to map functions, was a boon to United Way, says 
Mitchell Norman. 

“We don’t have huge staffs of programmers or huge budgets 
for contractors,” she says. “The graphical [interface of Studio] 
allows you to see data relationships, so someone with SQL e 
perience can make relationships between the data in the s 
tems.” Now, campaign workers access all the data they need 
from one screen. “They log into Salesforce, and the data they 
need is there,” says Mitchell Norman. 

As the United Way scenario illustrates, a top-down ap- 
proach to integration can offer significant benefits in situa- 
tions when full-blown EAI is unnecessar 

“It’s appropriate if you’re trying to replicate a manual 
process where you need to hop among a dozen different ap- 
plications to complete a task,” says Teresa Jones, an analyst at 
Butler Group in Hull, England. “Rather than go into one ap- 
plication, write down a number, then key that into a second 
application, you can integrate that into one screen that looks 
workers at the United Way of Metropolitan Atlanta like a single application but with the underlying applications 
can get ail the data they need on one screen, = _ still there.” 

Pet} | That’s different, she notes, than simple data integration in 
which databases share data. User interface integration im 





Thanks to the use of a composite interface, fund-raising 
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plies integration of functionality as 
well as data. Such integration can be 
achieved with a variety of technolo- 
gies, including the following: 

@ A services assembly and orches- 
tration product like Above All Studio. 

® An interface-reuse technology, 
such as a programmatic interface serv- 
er like Jacada Ltd.’s Fusion, which de- 
velopers can use to create an interface 
that can input or retrieve data from un- 
derlying applications, or Corizon’s 
User Process Management software, 
which assembles new interfaces from 
bits of existing ones. 

® Rich-client technology, such as 
products from Nexaweb Technologies 
Inc., JackBe Corp. or Macromedia Inc. 

@ Interactive portlets in a portal, like 
IBM’s WebSphere Portal or Plumtree 
Software Inc.’s portal product. 


The Portlet Approach 


Unicco Service Co., a $700 million 
outsourcer that provides facilities ser- 
vices for office buildings, universities 
and sports arenas, chose to use inter- 
active portlets running on WebSphere 
Portal to create applications on top of 
existing systems. The portlets can 
query databases, input data and access 
application functions. They can also 
be joined into miniapplications, with 
one portlet passing data and events to 
another. 

Unicco used some off-the-shelf 
portlets from IBM and built others 
with Bowstreet Inc.’s Portlet Factory to 
create a quality-inspection interface 
for handheld devices, according to Bill 
Jenkins, senior IT director at Newton, 
Mass.-based Unicco. Now service per- 
sonnel in the field can use their hand- 
helds to input inspection information. 
That data then gets synced with a 





back-end J.D. Edwards & Co. system. 
Unicco has also built a time-entry 
application at the portal to replace 
faxed paperwork and is working on 
an accounts-payable document inter- 
face to let employees view scanned 
invoices and paperwork along with 
other customer-account information. 
Another advantage of portlets is that 
they can be reused. “We created a port- 
let that queries a database and returns 
a list. The next time we need a list 
query, it’s already done,” says Jenkins. 
Integration through portlets also 
helps with security and deployment. 
“In the past, when we built everything, 
we'd have to worry about security, how 
we're going to deliver it to the desktop 
and how to integrate it with other ap- 
plications,” says Jenkins. 


Screen Reuse 

Programmatic interface servers feature 
screen-reuse technology that’s essen- 
tially a more sophisticated version of 
screen scraping. That’s the technology 
behind a major integration effort at the 
Washington-based U.S. Naval Facilities 
Engineering Command (NavFac), which 
manages the construction of shore fa- 
cilities worldwide for the U.S. Navy. 
NavFac opted for screen integration 
when it sought to unify its procure- 
ment and contracting process. 

Using Jacada’s Fusion, NavFac built 
an interface of macros that invoke 
screen sequences off of its two prima- 
ry contract-related systems: the Win- 
dows-based Standard Procurement 
System (SPS) and the mainframe Facil- 
ity Information System (FIS), which 
handles funds management and proj- 
ect accounting. These screen se- 
quences are synchronized by a newly 
developed composite application 
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tion is extracted from different appli- 
cations and presented in a unified 
screen. 
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Tasking and events, in which the 

integration disperses information - 
like a data input - across multiple ap- 
plications, triggering other events. 


Composite services, which is simi- 
lar to.a composite process but uses 
Web services. 


called eContracts. The resulting uni- 
fied interface enables procurement 
specialists to see the complete history 
and status of a contract. 

“We had a lot of inefficiencies: re- 
dundant entry, lack of end-to-end visi- 
bility, fumbles where we’d hand some- 
thing off through e-mail but the person 
would be out of the office,” explains 
Cmdr. Scott Smith, assistant CIO of en- 
terprise integration for NavFac. “With 
60,000 actions per year and $6 billion 
being handled by 2,000 different peo- 
ple, we simply couldn’t continue to 
manage this in a haphazard way.” 

The other alternatives were a new 
ERP system or an integration broker, 
expensive options compared with the 
$600,000 spent on the composite ap- 
plication and the FIS/SPS interface, 
says Smith. “We were looking at 
upwards of $3 million dollars to do 
broker-based implementation, and 
the technical risk was high. The ERP 
approach would have required us to 
replace FIS and could easily cost up- 
wards of $100 million,” he says. 


Rich Clients 


The University of Pennsylvania’s 
Wharton School took a third approach 
to interface-level integration, basing its 
projects on rich-client technology. 
Rich clients make use of the local re- 
sources on the client, and data and ap- 
plication services from remote servers. 

Wharton used Macromedia’s Flash 
and Flex technologies to create a rich- 
client Web application that enables 
professors to create pictorial class lay- 
outs, says Dan Alig, senior IT project 
leader at Wharton. 

The rich-client application imports 
a blueprint of the classroom from a 
Wharton server, along with student 
photos from the identity card database 
and class lists from the registration 
system. Professors drag and drop stu- 
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dent pictures into an assigned seating 
arrangement, which helps them to 
learn faces and names more quickly. 

The system uses Flex’s presentation- 
layer technology on Macromedia’s 
ColdFusion application server, which 
handles the calls to the databases. 
Everything is rendered on the client 
via the Flash plug-in. The same tech- 
nology will be used to update the 
school’s class registration system, in 
which MBA students “bid” on elective 
courses. That interface will incorpo- 
rate data such as registration informa- 
tion, the database where each student’s 
availabie bidding “points” are stored 
and course descriptions and reviews. 

“We've made the push to take busi- 
ness processes and data and make 
them available through a Web brows- 
er,” says Alig. “These run via the Flash 
player, which all users have.” 

While rich-client technologies aren’t 
normally thought of as integration 
tools, they are useful for bringing data 
and services together at the desktop 
and for giving users more power to 
modify the applications. 

“With a rich-client application, a 
sales guy can decide to link a client 
record with another piece of informa- 
tion and link that to an application 
that’s docked on my desktop, and sud- 
denly they all work together,” says Ron 
Schmelzer, a senior analyst at Zap- 
Think LLC in Waltham, Mass. 


New Options 


Making customization, and even inte- 
gration, possible for less-technical 
users is appealing to cost-conscious 
businesses wary of major software 
projects. “The No. 1 issue for business 
customers is that it takes too long and 
too many IT resources to change appli- 
cations when a process changes,” says 
Erin Kinikin, an analyst at Forrester 
Research Inc. “Composites surface that 
business process so it’s easier for a 
less-technical user to add a step.” 

Interface-level integration can pro- 
duce tangible results faster than can a 
full-blown, months-long EAI or appli- 
cation development effort. 

“Building new systems and integrat- 
ing things on the back end takes effort, 
skills, money and time,” says Daryl 
Plummer, an analyst at Gartner Inc. 
“You could do server-side integration. 
But to achieve something quickly — 
between two weeks and three months 
— you have to do something like this.” 


@ 52736 





Hildreth is a freelance writer in 
Waltham, Mass. She can be reached 
at Sue.Hildreth@comcast.net. 
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Wavelets 


DEFINITION 


Wavelets are mathematical functions that let us 
divide data into different frequency components 
and then study each component with a resolution 
appropriate for its overall scale. Wavelets are used 
in computer imaging, animation, noise reduction 
and data compression. 


BY RUSSELL KAY 
N MANY FIELDS of study, 
from science and engi- 
neering to economics 
and psychology, we need 
to analyze data so that 
we can discover underly- 

ing patterns and information. 

A common way of doing this 

is to transform the data by 

applying mathematical func- 
tions. 

One of the best-known 
processing techniques is 
Fourier analysis, in 
which you can approx- 
imate a real-world data 
stream by adding to- 
gether a series of sine 
and cosine curves at 
different frequencies; 
the more curves you include 
in your approximation, the 
more closely you can replicate 
the original data. Since we 
know how to work with these 
well-defined trigonometric 
curves, we can often deduce 
patterns in the data that would 
otherwise remain hidden. 

But Fourier analysis has lim- 
itations. It works best when 
the original data has features 
that repeat periodically, and it 
has trouble with transient sig- 
nals or data that shows abrupt 
changes, such as the spoken 
word. Often, we need to be 
able to change our analytical 
representation depending on 
the actual data, so that we can 
resolve more detail in specific 
parts of the data stream. In 
essence, we need a way to 
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change scale at various points, 
and scale is at the heart of 
wavelets. 


The Notion of Scale 
The following explanation is 
adapted from Dana Macken- 
zie’s highly recommended 
article “Wavelets: Seeing 
the Forest and the Trees” 
(www.beyonddiscovery.org/ 
content/view.txt.asp?a=1952). 

Consider how we view a 
eee If you’re looking 
down from a jet airlin- 
er in summer, a forest 
appears as a solid 
canopy of green. If 
you're in a car driving 
by, however, you see 
individual trees. If you 
stop and move closer, you can 
make out individual branches 
and leaves. Up close, you may 
spot a dewdrop or an insect 
sitting on a leaf. With a magni- 
fying glass, you can see struc- 
tural details of the leaf and its 
veins. 

As we get ever closer to an 


SOURCE: WAVEL SOFTWARE, BARNAUL. RUSSIA 


| object, our view becomes nar- 
rower and we see finer and 
finer detail. In other words, 
as our scope becomes smaller, 
our resolution becomes 
greater. 

Our eyes and mind adapt 
quickly to these changes in 
perspective, moving from 
the macro scale to the micro. 
Unfortunately, we can’t apply 
this technique to a photograph 
or computerized digital image. 

If you enlarged a picture of 
a forest (as if you were trying 
to get “closer” to a tree), all 
you'd see is a fuzzier image; 
you still wouldn’t be able to 
make out the branch, the leaf 
or the dewdrop. Regardless of 
what you might see in the 
movies, no amount of “sharp- 
ening” or processing can help 
you see detail that hasn’t al- 
ready been encoded into the 
image. We can’t see anything 
smaller than a pixel, and the 
camera can show us only one 
resolution at a time. 

Wavelet algorithms allow us 
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In contrast to JPEG compres- 
sion, a wavelet algorithm 
doesn’t divide an image into 
blocks but instead analyzes 
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to record or process different 
areas of a scene at different 
levels of detail (resolution) 
and using greater amounts 


| of compression (scale). In 
| essence, they let us take new 


photos at closer range. If you 
look at a collection of data 
(also called a signal) froma 
broad perspective, you'll no- 
tice large-scale features; using 
a smaller, closer perspective, 
you can observe much smaller 
features. 


Enter Wavelets 

Unlike the sinusoidal, endless- 
ly repeating waves used in 
Fourier analysis, wavelets are 
often irregular and asymmet- 
ric, with values that die out to 
zero as they move farther 
from a central point. By de- 
composing a data stream into 


| wavelets, it’s often possible to 
| preserve and even enhance 


specific local features of the 
signal and information about 
its timing. 

Wavelets can take almost 
any shape, and much of the 
work being done in wavelet 
applications is based on find- 
ing appropriate wavelet func- 
tions that work for the type of 
data being processed. 

The first wavelet function 
was a simple square wave- 
form, developed by mathe- 
matician Alfred Harr in the 
early 1900s. Real advancement 
in the field, however, began in 
the mid-1980s, when Jean 
Morlet, an engineer at a 
French oil company, devel- 
oped wavelet-transform analy- 
sis to interpret seismic data. 
He then teamed with physicist 
Alex Grossmann to formalize 
the mathematics. 

Moving well beyond their 
geophysical roots, wavelets to- 
day are used for a variety of 
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| purposes, especially in the 


areas of digital imaging and 


| compression. 


Depending on your needs, 


| for example, you can use dif- 
ferent types of compression 


{QuickLink a5480] to reduce 


| the size of a digital image ac- 


cording to how much detail or 


| accuracy you are willing to 


give up. Wavelet-based com- 
pression can be much more 


| efficient than older types. 


Wavelets also make possible 
incredibly fine detail and tex- 
ture mapping, such as the life- 
like rendering of hair in the 
animated film Monsters, Inc., 
while still keeping file sizes 
and processing times man- 
ageable. 

Wavelets are central to a 
number of image-related com- 
pression standards, including 
the JPEG-2000 standard for 
color images and WSQ,, the 
wavelet scalar quantization 
gray-scale fingerprint image 
compression algorithm that 
the FBI has used since 1993 for 
storing its fingerprint data- 
base. 

The wavelet compression in 
the MPEG-4 digital video 
standard offers better-quality 
Web-based video than JPEG, 
yet it produces files that are a 
fraction of the size. MPEG-4 
also has several quality layers, 
allowing servers to adjust 
their output dynamically ac- 
cording to needed bandwidth. 

Wavelets are also being 
used for noise reduction and 
image-searching techniques. 
Scientists are now exploring 
the use of wavelets for various 
types of medical diagnostics 
and for weather forecasting as 


well. @ 52844 


Kay is aComputerworld 
contributing writer in Worces- 
ter, Mass. Contact him at 
russkay@charter.net. 
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For links to more information and tutorials 
on wavelets, visit our Web site: 
Q QuickLink 52845 
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Finding My Way in 
The Bureaucracy 


Our security manager pushes on with con- 
tingency planning, but a visit with the CISO 
ends with a political faux pas. By C.J. Kelly 


FTER THE ADVENTURE 

that I described in my 

Feb. 14 column, “Disas- 

ter Recovery Planned 
on the Fly” [QuickLink 52227], 
I set about creating a real con- 
tingency plan. I’ve made some 
progress, but along the way, 
I’ve gotten a good taste of 
what it’s like to work in a state 
agency. 

Having found no evidence 
of contingency plans 
for either facilities or 
personnel, I decided SE 
that my first step 
should be to talk to 
the chairman of the 
safety committee. 
This fellow is a life- 
long government employee 
who looks as if he should al- 
ready be retired. 

We've all heard the rumors 
that government employees, 
feeling secure with a lifetime 
job that provides good retire- 
ment and health benefits, have 
the mentality that “it all pays 
the same” whether they work 
hard or not. I now think those 
rumors are true. And I hear 
that it can take up to three 
years to fire someone around 
here. No wonder no contin- 
gency plans are in place. 

I explained to the safety 
committee chairman that I 
was working on a contingency 
plan for the agency and that I 
wanted to make sure it ad- 
dressed facilities and person- 
nel as well as information 
systems. I asked him how of- 
ten the committee meets and 
whether I could sit in on a 
meeting. 

Bad news: They meet annu- 
ally, and I had just missed the 
meeting. So, what issues had 
they addressed? The chair- 
man’s most urgent concern 


cnateiaildiaias his 
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| was that many employees are 
| getting up in years; the com- 
mittee decided to recommend 
to the agency administrator 
(in private-sector terms, this is 
the equivalent of a division 
| president) that a defibrillator 
| be purchased in case someone 
had a heart attack. OK, I could 
| see that the safety committee 
wasn’t going to be much help. 
| Working on my own, I com- 
pleted the contin- 
gency planning road 
map and began to 
identify the major 
information sys- 
tems. I was pulling 
together an invento- 
ry and identifying 
| where confidential data re- 
sided outside the major infor- 
mation systems — all in all, 
having a great time — when 
it occurred to me that I just 
might want to make sure that 
my business-impact assess- 
ment and individual disaster 
recovery plans for the major 
information systems aligned 
with the larger government 
picture. 
That’s when I got the bright 
idea to boldly go where no 
woman has gone before and 


| got the 
bright idea to 
boldly go where no 
woman has gone 
before and e-mail the 
chief information 
security officer 
for the state. 








e-mail the chief information 
security officer for the state. 
I had met the guy once and 


| thought he seemed a little wet 


behind the ears; I figured he 
would probably welcome my 
expertise on one of his com- 


| mittees. Wrong. 


The CISO called my desk 
phone immediately. I thought 
that was a good sign. We 
scheduled a meeting, and I 
took my boss along for this 
auspicious occasion. The two 
of us wound our way back to 
the CISO’s office after receiv- 
ing visitor badges. The CISO 
was in a meeting with some 
people, but when he saw us, 
he summarily dismissed that 
group and welcomed us into 
his office. 

Although young, he was an 
imposing figure in height and 
build, and he made an impres- 
sion with his bleached white 
teeth, styled hair, big brown 
eyes and great smile. 

His office walls were 
adorned with military para- 
phernalia, including two 
framed arrangements of 
medals. I thought they couldn’t 
be his, given his age, but per- 
haps he came from a military 
family and the two sets of 
medals were his father’s and 
grandfather’s. I was thinking, 
“Oh great, the good ol’ boys 
club,” but I decided to reserve 


| judgment. 


Explaining the Obvious 
I was also thinking that this 
was probably the CISO’s first 
really big job. My boss and I 
have vast experience manag- 
ing multimillion-dollar bud- 
gets, but we sat in our chairs 
while this fellow huffed and 
puffed about his importance. 
He told us stories that gave 
him credit for bringing the 
state up to speed on the IT 
security front, and then he 
began drawing diagrams on 
his whiteboard showing how 





he had single-handedly “re- 
architected” the network 

for better security. He drew 
little squares and arrows as 


| he explained how he had cre- 
| ated a DMZ. 


My boss and I have many 
years of experience in three- 
tiered architectures utilizing 
multiple DMZs, but the CISO 


| kept stopping and turning 


around to make sure that we 
understood and speaking to us 


| as if we were kindergartners. 


I knew that my feelings — 
impatience, annoyance and 
embarrassment for the CISO 


| among them — were show- 
| ing on my face, so I began 


shuffling the papers in my 


| lap as I tried to avoid the 
| CISO’s gaze. 


“You appear to not be happy 
with my architecture,” he said 
to me. 

And that was when I blew it 
politically. I chirped up with, 
“Oh no, your architecture di- 
rection is good. That is the 
way it should be. My expres- 
sion was probably one of bore- 
dom more than anything else.” 

He blinked as if he wasn’t 
sure he had heard me right. 
My boss tried to steer the con- 
versation to a topic of concern 
that he needed the CISO’s 
help on. While they continued 
their discussion, I tried to fig- 
ure out if there was any way I 
could save myself on this one. 
Probably not, but I decided it 
didn’t matter, since I thought 


| the guy was a pompous ass 


without much experience. 
Why should I care if he 
likes me (aside from the fact 


| that I’d rather not have to look 


for yet another new job so 
soon)? I know this is going to 
come back to haunt me one of 
these days. But when that day 
comes, we'll probably be the 
only agency in the entire state 
system with a full contingency 
plan in place. I can feel good 
about that. B 


WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “C.J. Kelly,” whose 
name and employer have been disguised 


| for obvious reasons. Contact her at 


mscjkelly@yahoo.com, or join the dis- 
cussion in our forum: QuickLink a1590 
To find a complete archive of our 
Security Manager's Journals, go online to 
@ computerworld.com/secjournal 
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SECURITY LOG 


Phishing Lures Up 
The number of phishing 
e-mails grew by 42% last 
month, according to the latest 
report from the Anti-Phishing 
Working Group (APW6). In 
January, 12,845 completely 
new phishing e-mails were 
reported to the APWG. The 
APWG statistics aiso reveal 
that the number of unique 
phishing Web sites went up by 
47%, from 1,740 to 2,560. 
The group states that up to 
5% of recipients have fallen 
prey to the scams in any re- 
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RippleTech Unveils 
Sarb-Ox Software 


® RippleTech Inc., a Conshohock- 
en, Pa.-based provider of security, 
compliance and systems manage- 
ment software, has introduced 
LogCaster for Sarbanes-Oxley, an 
event-log consolidation system 
designed to help corporate execu- 
tives view their compliance with 
Section 404 of the Sarbanes- 
Oxley Act. The software's user in- 
terface provides required reports 
on internal financial controls while 
helping to identify other areas of 
potential risk, said RippleTech. 
Pricing starts at $550 per server, 
with a minimum configuration of 
five servers. LogCaster monitors 
and manages a broad range of 
technologies, including Windows, 





Unix and Linux operating systems, 


as well as firewalls, Web servers 
and databases. 


CA Announces Doc 
Management Apps 


@ Computer Associates Interna- 
tional Inc. announced three new 
Unicenter software products for 
storing, viewing, printing and dis- 
tributing documents. All three - 
Unicenter CA-Spoo! Print Man- 
agement r11, Unicenter CA-View 


ri and Unicenter CA-Deliver rfi- | 


work with z/OS mainframes and 
distributed systems. They were 
demonstrated at the Share Tech- 


ing was not announced. 


Corel Releases 


Tech Graphics Suite | 


® Ottawa-based Corel Corp. has 


unveiled Corel Designer Technical | 


Suite 12 for technical graphics 
professionals. New and enhanced 
features include a Projected 
Drawing Mode and Dynamic 
Guides to enable users to create 
drawings faster and more pre- 
cisely than they could with earlier 
suite ($299 for an upgrade), 
which will be available this 
month, also includes drawing, im- 
age-editing, graphics-conversion 
and screen-capture applications. 


| 
| 
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MARK WILLOUGHBY 


Moving ‘loward 
Selfawareness 


N THE BEGINNING, there was management and 
security. By today’s standards, they were rela- 
tively unsophisticated — the management of a 
host system and the security of its users. 
Then came the network. It had to be moni- 
tored and controlled to orchestrate all the devices 


sending packets around. The 
network also introduced the 
concept of perimeter securi- 
ty to make sure only autho- 
rized users could access the 
trusted resources. 

From these humble begin- 
nings, security and manage- 
ment have spiraled into 
layer upon layer of complexi- 
ty as we accelerate toward 
the adaptive enterprise vi- 
sion. The Information Age 
is all about always-on, on- 
demand resources and utility 
computing. Consider the 
crowded management milieu 
today. We have, to name a 
few, the management of ser- 
vices, infrastructure, storage, 
configurations, data centers, 
traffic, applications, devices 
of all types, content and compliance, as 
well as security and identities. 

Security and identity management 
crosses into the security zone. Here the 
pace of innovation is driven wildly by 
malfeasance, misfeasance and nonfea- 
sance. The issues that matter here are 
security for users, storage, configura- 
tions, data, applications, devices of all 
types and content — the list starts to 
resemble the one for management. 

Much is being written about how the 
overlap is blurring the historic divide 
between management and security. Con- 
figurations are now a chicken-and-egg 
dialectic of tight management for strong 
security versus tight security for strong 
management. Software patches must be 
automatically distributed, installed and 
tested to buttress security on millions 
of devices around the globe. Network 


MARK WILLOUGHBY, CISSP 
is a 20-year IT industry 
veteran and journalist. He 
has tracked security and 
risk management start 
ups for seven years and 
is a Managing consultant 
at MessagingGroup, a 
Denver-based firm spe 
cializing in content deve 
opment. He can be 
reached at markw@ 
messaginggroup.com 





1 traffic must be monitored to 
thwart debilitating denial- 
of-service attacks. 

There’s no end in sight as 
autonomic computing gains 
momentum. But getting to 
this goal of the on-demand, 


always-on information infra- 


structure is going to require 
new capabilities beyond to- 
day’s relatively crude man- 

agement and security tools. 


agement and security are 
mostly empirical. We watch 
and accumulate information 
so we can react to or, prefer- 
ably, anticipate situations. 
The sheer volume of data 
that must be monitored 
across the autonomic infra- 
structure will render empir- 


| ical management impractical. 


Smart vendors, seeking competitive 


| advantage, are adding modeling capabili- | i : : 
| mance. The system has the historical 


ties to put more intelligence into the 
adaptive infrastructure. Modeling is the 
key ingredient for an intelligent infra- 


| structure capable of quickly scaling to 


meet the demands of change. 

These first tools mostly bring deduc- 
tive reasoning for “what-if” modeling to 
support the first generation of adaptive 
infrastructure. What-if modeling pre- 
dicts the impact of changes to some dis- 
crete element buried inside a layer of the 


| information infrastructure. Sophisticat- 


ed deductive modeling considers the 
result of changes in two or even three 
variables. Real-world applications of this 
have brought us relatively well-behaved 
systems, albeit ones with fewer variables 
than the adaptive infrastructure, such as 


The tools we use for man- | : 
understanding of the problem and a lot 


| of data, which we’re acquiring now for 





those capable of planning peak water us- 
age during the Super Bowl or managing 
telephone networks on Mother’s Day. 
Deductive modeling tools are an inter- 
mediate step. They aren’t sufficiently 
powerful or sophisticated to make multi- 
variant decisions across all the myriad 
elements and layers in the always-on, 
on-demand infrastructure. As we in- 
crease our understanding of the inter- 


| actions and dependencies, we will ac- 
| quire the knowledge to do inductive 


modeling, the more elegant solution. 
Inductive modeling goes by the street 


| name predictive modeling and may be 
| the real deal for managing and securing 


all those elements and layers in the in- 
formation utility. Predictive modeling is 
already a hot market for predicting 


| multivariant events in health care, busi- 


ness, air traffic control and meteorology. 
Predictive modeling requires a good 


the information utility. The big differ- 
ence is that predictive modeling starts 
with the desired outcome. You plug in 


| the number of users you must support 


under given application workload, and 
the model returns the optimal configura- 


| tions for all the elements in all the layers 
of the infrastructure. 


There’s no guessing on how storage 
throughput impacts application perfor- 


data and intelligence to model the im- 
pact of cross-domain security and to 
make adjustments. Neural networks 

and artificial intelligence agents can 
monitor critical elements and learn from 


| changes. They train themselves to make 
rational decisions when faced with com- 


plex situations involving many variables. 
The predictive infrastructure is “self- 
aware,” a term made famous in the Termi- 


| nator movies. To make the technology 


work, we humans must give up the notion 
of control, for better or worse. @ 52842 
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How touse 
defects to bring 
developers and 

testers closer 
together. By 
Michael Kelly 


IT’S SAFE TO SAY that developers and 
testers are guided by different motives, 
pressures and perspectives. Developers 
are motivated to complete code quickly 
and accurately and move on to the next 
problem. Testers are required to find 
and report problems within the system 


quickly. Someone should be 
urging developers to improve 
the quality of the code they 


create or modify, but that often takes a 
back seat to “more code, faster.” And 
someone should be inspiring testers 
to find more-meaningful bugs, but I 
rarely see that happening. 

In the course of a project, the more 
defects testers find and submit to de- 
velopers, the less time developers have 
to work on them, and communication 
may break down. Members of the proj- 
ect team commonly start to rely on 


BCU mMO TEU says a pattnership is needed to create good software. 


er BUGS 
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entering short descriptions and com- 
ments into a defect-tracking system as 
a means of communication. This often 
leads to misunderstandings and unnec- 
essary tension between the two groups. 
I have found some techniques that 

can improve communication between 
testers and developers and help them 
fix problems faster. 


SHARE AUTOMATED 
TESTS BETWEEN TEAMS 
Test teams often develop system-level 
test scripts using commercial tools, and 
developers frequently design unit-level 
test scripts using open-source frame- 
works. If your project team isn’t doing 
either, ask them why. There are plenty 
of good reasons not to use automation, 
but make sure the teams have at least 
considered it. If either team has auto- 
mated tests, get them to start sharing. 
Sharing test scripts gets everyone on 
the teams using the same tools and lan- 
guages. That makes developers more 
likely to offer improvements to the 
scripts and testers more inclined to 
offer advice on data selection and com- 
mon test patterns. Sharing test scripts 
also minimizes redundancy and typi- 
cally leads to increased test coverage. 
The more testers and developers col- 
laborate, the more powerful both their 
scripts become. Microsoft Corp., IBM 
and others have excellent integrated 
development environments built for 
this type of collaboration. 


DISTRIBUTE THE ABILITY 
TO EXECUTE SMOKE TESTS 
Every time developers compile code 
(often referred to as a “build”), there’s 
the potential for something to go 
wrong. To detect a bad build early, it’s 
helpful to create a series of prelimi- 
nary tests — commonly called smoke 
tests — that exercise the system from 
end to end. A smoke test doesn’t have 
to be exhaustive, but it should be capa- 
ble of exposing major problems. If the 
build fails the smoke test, the develop- 
ers will probably need to go back to the 
code to debug and find the problem. 

If you don’t have a smoke test, create 
one. If it’s not automated, automate it. 
Automated smoke tests are particular- 
ly powerful for the following reasons: 

@ They're used often, possibly many 
times a day. 

@ They provide meaningful informa- 
tion, such as whether the system is at 
an acceptable state for testing and all 
services are up — or not. 

@ They provide feedback quickly, 
typically in minutes. 

@ They’re easy to execute and 
distribute. 
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The easiest way to ensure that a 
smoke test is executed is to include it 
in the build process. Make the smoke 
test available to both testers and devel- 
opers through a central interface such 
as a project Web site or a test manage- 
ment tool. Not only does this get 
everyone using the same tools, but 
it can also get developers and testers 
collaborating on script development 
and maintenance. 


PERFORM RUNTIME 
ANALYSIS TOGETHER 


I’ve found that sharing runtime analy- 
sis is one of the most effective ways 
to increase developer/tester comm- 
unication. 

Runtime analysis is just what it 
sounds like: an analysis of the code as 
it’s executing. It can provide informa- 
tion on things like execution paths, 
code coverage, memory errors and 
leaks, performance and bottlenecks, 
and threading problems. 

For example, on one project, we had 
a problem with pages taking more than 
60 seconds to load. We ran numerous 
performance tests and couldn’t isolate 
the problem. Then, using a runtime 
analysis technique, the testing team 
found that a call was being executed 
4 million times when a page loaded. 
Armed with that information, an archi- 
tect fixed the problem the next day. 

There are many very good open- 
source and commercial runtime 
analysis tools, but it’s still a difficult 
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and thankless job. I’ve found that the 
most effective way to make sure that 
runtime analysis gets done is to have 
testers do it. Your testers don’t need 
to become runtime analysis experts. 
They just need to learn the basics 
about some tools, learn a little about 
the problems common to the technol- 
ogies they’re testing and find some 
time to actually do the testing. As the 
testers begin to discover problems, 
developers will begin to try to prevent 
those problems — and that will require 
them to use the tools themselves. 

As a tester, I like to show a develop- 
er what I’ve found with my limited 
runtime analysis. When I do so, the de- 
veloper no longer sees me as a tech- 
nology-blind tester who doesn’t know 
anything about development, and he’ll 
likely be interested in helping me 
understand what I’m seeing. Once a 
developer knows that a tester has the 
desire and the aptitude to learn, he 
typically is willing to spend time help- 
ing the tester understand the applica- 
ble technologies. From the developer’s 
point of view, explaining the technol- 
ogies once early in the project saves 
him from having to answer many small 
questions later. At the very least, the 
tester gains a basic understanding 
from which to ask smarter and more 
meaningful questions. 

When developers and testers work 
together with a runtime analysis tool, 
testers can share information on the 
risks and long-term effects of not 
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fixing problems. Developers can edu- 
cate testers on the technical aspects of 
the application technology and project 
environment. Together, they can un- 
cover and refine performance require- 
ments while learning new skills. 


USE LOG FILES TO 

ISOLATE PROBLEMS 

A simple technique for capturing bugs 
and debugging is to leverage log files. 
These are the files developers create at 
runtime that contain information 
about things like server and software 
activity and performance, as well as 
any problems that may be occurring. 
Often, when a problem happens be- 
hind the scenes of an application, it 
won't manifest on the user interface. 
For example, most Java exceptions 
don’t appear on-screen. But if develop- 
ers give testers access to the execution 
log files for the application, the testers 
can use scripts to parse through the log 
files, looking for abnormalities and ex- 
ceptions. Once developers know what 
the testers are looking for, they may be 
more willing to take the time to write 
this information to the log files in a 
common format for testers to parse. 


USE DEFECT-TRACKING 
SYSTEMS EFFECTIVELY 
Your project team probably uses some 
form of automated defect-tracking 
system. Developers should tell testers 
what specific information in a defect 
report or “ticket” is most helpful. This 
enables testers to provide the right 
type and amount of information, such 
as screenshots, source code, steps tak- 
en or a script test case that can repro- 
duce the bug, as well as any relevant 
log files. 

Testers and developers should also 
work out a defect-prioritization 
scheme. Without one, developers may 
miss serious problems while sorting 
through lots of reports of little bugs 
that the customer is unlikely to en- 
counter. By prioritizing defects, you 
ensure that critical bugs get fixed 
immediately and small problems get 
attention when time is available. 

Creating good software requires 
a partnership between testers and 
developers. Most developers and 
testers want to help in any way they 
can, assuming that they’re given time 
to do so. It’s up to each group to let the 
others know what they need, and it’s 
up to you, as manager, to make sure 


they have that time. @ 52679 





Kelly is a testing consultant at Fusion 
Alliance in Indianapolis. Contact him 
at Mike@MichaelDkKelly.com. 
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facility, anywhere on the IP network — and manage it all from one central location. 


Plus, ensure your data is always available. The LeftHand architecture offers unique 

availability features that protect your data whether you have a single site or if you're looking for a complete disaster 
ua me eee MLA RTC Rel emO aria melee ORO rel mal 
Ora (e irate ela Tew LAMA meee com By V i : 


Visit our web site to download a free white paper on the eight ways an iSCSI SAN simplifies life for an IT administrator. 
Check storage management off the list. 


? oe 866.4.IPSANS 
e- @ 
Leftl land %°.° ‘2 Storage a hould be www.lefthandnetworks.com/solutions 
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XECUTIVES 


ee 


BRAIN FOOD FOR IT E} 


Get Back in Touch 
With Your Inner Geek 


Are you getting a little out of touch 
with new technologies? “It's too easy 
[for ClOs] to lose direct contact with tech- 
nology, and the judgment of internal and 
external experts is not always sufficient,” 
says a team of Gartner Inc. analysts. “To 
understand some technologies demands 


personal experience,” they say ina bulletin 


about must-do resolutions for the Ci0. 


Gartner urges ClOs to get hands-on experi- : 
ence or see a live demonstration of the fol- : 


lowing technologies by mid-2005: 
= Networked gaming (think Xbox), to 


“learn how your next generation of employ- : 


ees is being ‘wired.’ ” 


@ A business process diagramming tool : 


and a Business Process Execution Lan- 
guage orchestration server. 


Best Bits 


The most useful parts of recent business 
and IT management books. 
THE BOOK: Innovating 
IT: Transforming IT 
From Cost Crunchers 
to Growth Drivers, by 
Lior Arussy (Wiley Publish- 
® ing Inc., 2005). 
t, a plea to book au- 
ors: Can we dispense 
with the phrase “IT is at a 
crossroads,” which shows 
up in almost every IT management book these 
days? IT management is always at a cross- 
roads, at the corner of Success and Failure. 
Fortunately, this book has some fresh ideas 
about how IT leaders can reinvent the IT func- 
tion as something more than just managing 
PCs, servers and storage, which is the path to 
becoming a replaceable utility. Arussy, focusing 
on the middle word in the title “chief informa- 
tion officer,” says ClOs “must become respon- 
sible for a product, and that product is informa- 
tion.” He says IT will have to act like a business, 
customize the information product for different 





NEWSCOM 


segments of customers (end users) and work 
to increase “information utilization” among 
users who have the biggest impact on building 
the business. 

Arussy also has some thought-provoking 
comments on how IT can support innovation. 
If you're ready to emerge from the doldrums 
and drudgery of cost-cutting, this could be an 
inspiring read.- Mitch Betts 


IETF ame SOLE 
of the most in-demand 
executive positions: 


Chief compliance officer 
ee en eae) 

Mita Pellet 
TMM T gL mele cls 


City ClO 





@ A wiki, which is a server program that 


: lets users collaborate when writing Web 
: content, to “see the power of simplicity 

: and transparency in collaboration, open- 
: source style.” 


@ Asleek Nokia 7280 cell phone, a 


; product that combines aesthetic design 
: with high-tech engineering. 


@ The voice-over-IP service from Skype 


: Technologies SA, to “see an example of 
: why business colleagues might start to 
: demand VoIP.” 


@ An electronic marketplace like 
www. innovationtutures.com or www.biz. 


: uiowa.edu/iem. 


@ A high-speed 3G data card for 


- : your laptop. 


@ An advanced robot like Sony Corp.'s 


= Qrio, which can walk, dance and run. 
: @ 52723 


- Mitch Betts 


Things to Ponder 

= Will instant messaging surpass e-mail 
as the preferred form of business com- 
munication? Sage Research Inc. in Natick, 
Mass., asked 96 IT decision-makers in U.S. 
businesses, and 419% of the respondents said 
it'll never happen. But 12% said it will happen 
within the next year, and 23% predicted within 
the next three years. 


= Consumer Web sites provide a much 
better visitor experience than business- 
to-business sites do, according to a For- 
rester Research Inc. report titled “B2B Web 
Sites Fail the Usability Test.” The report points 
to navigation problems and extremely slow 
page loading. 


® Hundreds of U.S. colleges are offering 
online courses in homeland security, ac- 
cording to The Chronicle of Higher Education 
in Washington. The popular programs cover 
security, terrorist attacks, critical infrastructure 
and risk assessments. 





GOT ANY BRIGHT IDEAS? Send them to 
pitches@computerworld.com. 
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Index of Business IT 
Demand, 2004-2005 
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1. IMs stockroom for ’01 merlot. 
/ 2. Conferencing with design partners. 

3. Orders from vendor, wirelessly. 
Pat 4. Driver receives last-minute order. 


" 5. Delivers orders quickly, accurately. 








ar 









td 





Middleware for the on demand world. Learn more at ibm.com/middieware/workpiace ([)) DEMAND BUSINESS i: 


1BM, the IBMlogo, Workplace and the On Demand logo are registered trademarks or trademarks of International Business Machines Corporation in the United States and/or 
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Euro RSCG 
Promotes Tanner 


Euro RSCG Worldwide, a gicbal 
communications agency based in 
New York, announced the ap- 
pointment of JOHN TANNER as_s| 
ClO. He will report to Chief Finan- 
cial Officer Andre Pinto. Tanner 
had been Euro’s director of IT in- 
frastructure since 2001. Previ- 
ously, he was vice president of 
networking and acting chief oper 
ating officer at Consonus Inc. He 
also built and then sold an entre- | 
preneurial venture called Network | 
Engineering Inc. 





Carroll Picked as 
Ohio’s Interim ClO 


Ohio Gov. Bob Taft announced 
that MARY F. CARROLL will serve | 
as the interim state CIO. The Cab- 
inet-level position oversees the 
state’s Office of Information 
Technology. Carroll previously 
served as deputy state CIO for the 
investment and governance divi- 
sion of the Office of Information 
Technology. 


Bostick to Head 
IT at Conseco 


Conseco Inc., an insurance com- 
pany in Carmel, Ind., has named 
RUSSELL M. BOSTICK executive 
vice president and ClO. Bostick 
joins Conseco from Chase Insur- 
ance, an arm of J.P. Morgan 
Chase & Co., where he was chief 
technology officer. He has also 
held key technology positions at 
Corporate Software & Technolo- 
gy, CNA Insurance and IBM. 


CSS Industries 
Names Morris ClO 


RICHARD L. MORRIS has joined 
CSS industries Inc., a consumer 
products company in Philadelphia, 
as vice president and C10. Morris 
reports to CEO David J.M. Ersk- 
ine. Previously, Morris was man- 
aging director at Xernon Technol- 
ogy Solutions, and he also served 
as CIO at Exide Corp., BetzDear- 





born Inc. and PerkinElmer Inc. 
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Are You a 
Scary Boss? 


‘LL NEVER FORGET the first time I learned that 
one of my subordinates was afraid of me. 

A talented young man, probably 26, had just 
left my office after explaining to me how happy 
he was with his current project. My assistant 

came in and told me that he had spent the 20 minutes 
prior to our appointment complaining to her about 
how terrible his project was and how miserable he felt. 

I was absolutely incredulous. Why would he lie to 
me? What was the point? I was the one person who 
could help him, if only he asked for help. I asked my 
assistant, “Why he would do that?” 


“He’s afraid of you,” she 
said matter-of-factly. The 
words hung there in the air 
for a minute as I tried to 
absorb their meaning. 

Someone was afraid of 
me — of me. It was un- 
fathomable. 

It certainly didn’t fit my 
self-image. I was 27, short, 
introverted, quiet and in- 
timidated by my new job 
managing 50 people, most- 
ly older than me. What’s 
to be afraid of? It seemed 
more plausible that I 
should be afraid of him 
rather than the reverse. 

But there it was. I was 
the scary boss. 

Over the years, I’ve seen a lot of 
managers who have been regarded as 
terrifying by their staffs. I’m not sure 
how many realized it, but I suspect 
that most of them probably never 
knew the degree to which they were 
considered frightening, intimidating 
or just plain mean. 

What makes someone a scary boss? 
Are you one of them? Here are a few 
of the things that tend to foster that 
impression. 





Position. Sometimes, just 
having the boss title is 
enough to make you scary. 
The fact that you have the 
power to hire, fire and 
grant raises and bonuses 
makes you a menacing 
figure. 

Unpredictability. If people 
can’t reasonably anticipate 
your response to a situa- 
tion, they naturally assume 
the worst. IT professionals 
are well-trained symbolic 
thinkers. Their education, 
and comfort, is rooted in 
the deterministic. “If I put 
a 3 in that field, I know that 
the algorithm says that the 
answer will always be a 12.” 

Random responses to the same stimuli 


| mean only one thing to technical folks: 


bugs. If you as a manager are unpre- 
dictable, clearly you are a bug in your 
own departmental system. 

Volatility. Even the most predictable 
manager can be emotionally volatile. 
An unbridled temper is never a com- 
fort to one’s staff. In some ways this is 
like unpredictability. If your mood or 
other events occasionally affect your 
responses to situations, then you 





| might be scary all of the time. 


Mistrust of staff. If through word or 


| deed you regularly display mistrust of 
| or contempt for staff, presenting 
| things to you will likely be a scary ex- 


perience. Mistrust can be communi- 


| cated in myriad subtle ways. Some 

| managers ask lots of rudimentary 

| questions of the staff, displaying dis- 

| dain for their abilities. Others ask end- 


less, aggressive, prosecutorial ques- 
& 


| tions that suggest a hunt for some de- 
| liberately concealed truth. 


Hoarding of information. Supervisors 


| known for not sharing valuable infor- 

| mation frustrate and frighten their 

| staffs. Hoarding suggests that the boss 
| is either power-hungry and self-serv- 

| ing or oblivious and incompetent. Nei- 
| ther interpretation is comforting. 


Not protecting staff. One of the things 


| that subordinates reasonably expect 


from their supervisors is protection 


| from external forces. If someone in the 
| group gets fired every time the boss’s 
boss throws a temper tantrum, then 


people feel unduly exposed to the po- 
litical elements. It’s as if every deck- 
hand on a sailing vessel felt compelled 
to keep an eye on the weather because 
the captain wasn’t trustworthy. 

As for the guy who wouldn’t tell me 
about his crappy project, I eventually 
discovered that he was both afraid of 
my position and angry at me for hav- 
ing it. He had wanted the job, but it 
had been offered to me. So he was 
afraid of me for reasons having almost 
nothing to do with me personally. But 
it didn’t matter; I had become the 
scary boss. 

If you want to encourage the devel- 
opment of mutual trust that encour- 
ages productivity, it’s important to 
know: Are you one, too? @ 52678 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 





JASON 
IT DIRECTOR 
WEBEX FANATIC 


No one is more fanatical about secure web meetings than the men and women of IT. Their solution of choice: WebEx. Every 
WebEx meeting application runs on the ultra-secure, highly scalabte and proven reliable MediaTone™ network. Unlike other 
web meeting solutions you don’t install MediaTone. You tap into it. Nothing even touches your servers. Low impact. High 
security. And an interface users love. Now you can actually please all of the people all of the time. Secure web meetings 


start at www.webex.com/it 


WebEx, the WebEx logo, the WebEx bail and MediaTone are registered trademarks of WebEx Communications, inc. ©2005 All rights reserved. Terms and conditions apply. 
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dtSearch Instantly Search 
Gigabytes of Text 
Across a PC, Network, Intranet or Internet 


Publish Large Document Collections to the Web or to CD/DVD 


¢@ over two dozen indexed, unindexed, fielded & full-text search options 
¢ highlights hits in HTML, XML, & PDF while displaying embedded links, formatting & [iEYTs. 


converts other file types (word processor, database, spreadsheet, email, ZIP, Unicode, etc.) 
to HTML for display with highlighted hits 
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1-800-IT- - YT OU tLe 


hundreds of developer case studies & reviews 
SSL USL er LL ¢ fully-functional evaluations 


dtSearch Reviews... 


“Intuitive and austere ... 
search tool” — PC World 


“Blindingly fast” 
— Computer Forensics: Incident 
Response Essentials 


“A powerful arsenal of search 
tools” — The New York Times 


“Covers all data sources ... ul 
Web-based engines” — eWEEK 
@ “Searches at blazing speeds” 
— Computer Reseller News Test Center 


MCR ur emer eg 
Meats ee hs | 


MARKETPLACE 


To advertise, 
or email print(@ven.com 


Reach Respected IT Leaders in 


COMPUTERWORLD 
Marketplace Advertising Sec 


The Computerworld Marketplace advertising sectio 
reaches more than 1.8 million IT decision makers e 
week. Marketplace advertising helps Computerwor 
readers compare prices, search for the best values 
and find new products and 


call 212-655-5114 











Just Say no 
to inferior service 


Insist on a CompTlA 
Authorized Service Center ase 


Have the right people at the right time for the right solutions. 
Know CompTIA certified technicians are right there. 


To find an ASC or ASC Gold near you, 
or to become one yourself, visit www.asc.comptia.org/cw 


Oc CompTiA. 


A+ Authorized Service Center 








www.computerworld.com 











Network Systems 
Analyst for import 
co. in Miami, Florida; 
2 yrs. exp. in job of- 
fered or related field. 
Send resume to 
Phoenician Imports, 
Inc., Attn: Marvin 
Corrales, 11905 S. 
Dixie Hway, Miami, 
FL 33156. 


Software Test Engineer. Bachel- 
or's degree in Comp. Sci., MIS 
or rel. field + 5 yrs exp in soft- 
ware development and/or test- 
ing (or equiv.). 18 months exp 
w/ mainframe software and/or 
testing using COBOL, CICS 
and JCL. Exp. w/: SAS, Micro- 
soft Office Suite tools, SQL 
Server, Oracle, Visual Basic 
TSO, WinRunner, and other 
testing automation tools re- 
quired. Demonstrated oral and 
written communication skills 
required. Send resumes to 
Margo Massey, NCS Pearson 
2510 N. Dodge, lowa City, IA 
52245 EOE 


SUPPT. SPCLST (DEN- 
VER, CO): Serve as tech 
contact for customers & 
clients via phone, email, 
and web contact. Req'd: 3 
yrs. & exp. w/ hdwre, 
sftwre, & ntwk installation 
& troubleshooting (on-site 
& remote) in CTI industry, 1 
yr. post-secondary IT train- 
ing, & MCP Certification 
Resumes: NICE, 301 
Route 17 North, 10Th FL 
Rutherford, NJ 07070 
Attn: G Farese 


-Net Developer 
Develop applications that meet 
user specifications, coding reus- 
able software objects, and par- 
ticipate in all phases of a prod- 
uct's life cycle. Must have Bach- 
elors Degree in Computer Sci- 
ence or Engineering or in a relat- 
ed field & 2 yrs. exp. or 2yrs 
exp. in a related position. Must 
have ability to use: C#, ASP.Net. 
ADO.Net, SQL Server & Tools 
40.0 hrs./wk 8:00 AM - 6:00 PM 
Applicants send cover letter 
and resume to: UCG, 11300 
Rockvilie Pike, Ste. 1100 
Rockville, MD., 20852, Attn: A. 
Antonis 


S1, the leading global 
provider of innovative 
eFinance services & 
solutions, is looking 
for S/W Developers & 
Consultants for our 
Atlanta, GA & Little- 
ton, MA offices. For 
more info visit our 
website at: 

http://www.s1.com/ 

company/careers 


CWO30705E/MWiW 1 


COMPUTER SYSTEM ANA- 
LYST - Ft. Lauderdale 
Cellular Link Communica- 
tions, Inc. seeks a Computer 
System Analyst to provide 
data/telecommunications and 
hardware/software solu 
using Wintesla, Phoenix, As- 
sura PST and Motorola PST 
systems. Applicants with a 
Bachelor degree in Computer 
Science and 2 yrs of exp 
send resume to: Syed Tahir 
Hussain, 5815B Andrews 
Way, Ft. Lauderdale, FL 
33309-2359. 


Programmer Analyst 
Analyze, design, develop, imple- 
ment, maintain and support 
Internet based application using 
XML, Java, MySQL, Web Appii- 
cation Server, NET& Business 
Objects. Analyze business pro- 
cedures, solve problems, rede- 
fine data and convert data to a 
programmable form by using 
MS Project, Excet & Acce 
Req. Bachelor's in Comp. 
ence or Engg. & 2 yrs of exp 
Send Resume to: H.R., A-1 
Liberty International Rags, 4411 
East Park Dr. Houston, TX 
77028 or E-mail: atlibertyini@ 
yahoo.com 


S1, the leading glob- 
al provider of innova- 
tive eFinance ser- 
vices & solutions, is 
looking for S/W De- 
velopers & Consult- 
ants for our Austin, 
TX office. For more 
info visit our website 
at: 

http://www.s1.com/ 

company/careers 


DART Software Developer with 
experience in designing large 
databases to work in Cleveland 
OH Send resume to’ 
HCCJobs@activehealth.net 
Health Data Management 
Solutions, 102 Madison Ave. 
12th Floor, New York, NY 10016. 


Must ref job code: SD-OH 


Prog. Analyst needed by a 
manufacturer & dist. of appar- 
el in NJ. Must have a Bach 
Deg/Equiv. in Comp. Sci/ 
Mgmt Info. Systems & 2 yrs 
exp. in analyzing, designing, 
developing, testing, imple- 
menting & supporting in- 
house busn. applications 
using SQL, PL/SQL, Oracle, 
D2K w/ implementation exp. 
in Oracle Finc’l. Acctg. Mgmt. 
Info Sys. Resp. to Gurcharan 
Singh, CEO @ _ Solo 
Creations, Inc., 10-16 Aquar- 
ium Dr., Secaucus, NJ 07094. 


Software 
S/ware D’ 
reqmts, procedur 
to automate proc 
improve existing 


using C, C++ 


organization 
analyze ct 

cedures 

learn specr 

reqmts, such as 

input, how data is 

rized & format for r 

detailed des 

needs, prgm 

reqd to dvip or modify 

prgm; Review c systm 
bilities, work flow & schec 
limitations to determine 

prgm change is poss 
existing systm; Anz 

ness procedures & prob 
redefine data & convert it to pro. 
grammable form for EDP. Req 
Masters in or Comp 
Engg, (or iv) & 1 yr exp 
either in job offd or in related 
occupation as Remote S/ware 
Dvipr. 40hrs/wk, 9a-6p, M-F. Job 
to be performed ir Valley 
Stream, NY & various unantici 
pated client sites in US as 
assigned. Respond Develop- 
onBox, LLC, 99 West Haw 
thorne Ave, Si ( Valley 
Stream, NY 11580 


Immediate opening 
Programmers Globaltek Inc 
has openings for experienced 
Computer Professionals (multi- 
ple openings) W/relevent edu- 
cation and experience 
bination of skills reqd. C, C++ 
VC++, SQL, T-SQL, PL/SQL 
Perl, J2EE, JSP, ASP, EJB, VB 
Script VBA XML HTML 
DHTML, Java Script, Database. 
DB2, Sybase, Oracie, SQL 
Server, MS Access, Informatica 
Business Obj Crystal 
Reports, Cognos, Brio, Data 
Stage, Abinitio, Mic ratergy 
Actuate, Erwin Planet, liS 
Netscape Enterprise Server. 
Application Server, Web Sphere 
Web logic, Windows NT, Unix 
ASR/TTS, CTI, ERP, CRM. 40% 
travel to client sites reqd. Please 
send resume to Globaltek Inc 
277 Fairfield Road, Suite 103 
Fairfield, NJ 07004 


Database Administrator for 
Maine: Willi be responsible for 
administration and maintenance 
of Oracle databases using Or. 
acle streams, Quest sharepiex 
Veritas VCS, Net Appliance 
Fiber attached storage, Oracle 
and Sun servers. Manages data- 
base performance, availability, 
backup, restore and recovery 
using Oracle tools. Responsible 
for advanced data replication of 
production databases using Or- 
acle streams and Sharepiex 
software. Master of Science or 
equivalent, employer will accept 
Bachelors Degree with 5 yrs. 
progressive experience in lieu of 
Master's. Competitive Salary. 40 
hr. week. Send resume to HR 
Manager, Broadfusion Inc., 12 
1/2 Pike Street. Augusta, ME 
04330. 


Sr DBA to lead teams to archi- 
tect, design, install, upgrade 
perform tuning, backups of 
Oracle, Informix instances on 
Sun Solaris,Windows servers 
configure,manage SQL*Net and 
Oracle, Apache web server with 
UNIX, Windows envir; design. 
develop new data interfaces with 
legacy systems using Oracle 
tools and Informix tools such as 
Import/Export, SQL Loader, PL 
SQL; manage SQL Server for 
migrating the data from SQL 
server to any database; parsing 
the XML strings into different 
applications;create stored pro- 
cedures, packages and data- 
base triggers. Require MS or 
foreign equiv in CS/Engg (any 
branch) or related field witht- 
woyrsexp as a DBA. Competi- 
tive salary, Travel Involved. F/T. 
Resumes to Global IT Solutions 
USI, Inc., 600 Stevens Port 
Drive, Ste 125, Dakota Dunes 
SD 57049 
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Orxalie 


evan sretet Cans 


An extraordinary place to work 


* Application Development 
* Business Systems Analysis 


Architecture 
Management 


Project Management 


* Technical Support 
a oleae Celliahiee lalela) 


* Web Development 
* Quality Assurance 


and Testing 


Visit our website at www.capgroup.com 


Database Designer/Program- 
mer/Data Analyst with experi- 
ence in database administration 
including hardware and software 
evaluation and installation, logi- 
cal, physical database design 
and implementation, security 
administration, backup and re- 
covery planning, performance 
tuning, development of policies. 
standards and procedures reliat- 
ed to the database environment 
Generate reports and analyze 
data gathered from Metric View 
surveys and campaigns. Mini- 
mum Req: Graduation from col- 
lege or university with Computer 
Science major or equivalent 2+ 
yr. exp.in s/w design, develop- 
ment and implementation. Must 
have Exp with SPSS (tyr), SQL 
server 2000, T-SQL, DTS, VB. 
ASP, knowledge of data model- 
ing concepts, data analysis tools 
and techniques. Ref Job 
$D1281097. Apply to South 
Dakota Career Center, 811 E 
10th St. Sioux Falls, SD 57103- 
16500; tel. 605-367-5300; fax 
605-367-5308. 


Software Applications Engineer, 
assigned as IT Consultant, to 
design, develop and modify soft- 
ware for web and general com- 
puter applications, including 
control software to interface 
directly with hardware, utilizing 
C++, Visual Basic, and .Net 
Multiple Openings Available. 
Requires Bachelors or equiva- 
lent-level degree in Computer 
Science, Engineering, Mathe- 
matics or closely related field. 
and three years experience 
using C++ and Visual Basic to 
develop software applications, 
including control software to 
interface directly with hardware. 
Send resume to: Rick Heinlein 
Ferguson Consulting, Inc 
12444 Powerscourt Drive, Ste 
235, St. Louis, MO 63131. Equal 
Opportunity Employer. 


COMPUTER SOFTWARE 
ENGINEER 


Physician Associates, an est 
ablished IPA in the San Gabriel 
Valley, is seeking a Computer 
Software Engineer with experi- 
ence in the health insurance 
industry. In conjunction with 
management, this position will 
gather technical requirements 
pertaining to the enhancement 
of web-based applications for 
medical insurance and develop 
specifications. Will participate 
in the analysis, design, devel- 
opment, testing, implementa- 
tion and documentation of 
required software applications 
utilizing Cold Fusion. Requires 
a Bachelor's degree in Comput- 
er Engineering and a minimum 
of 1 year of experience. For 
confidential consideration 
please submit resume to 
Physician Associates, 199 S 
Robles Ave Suite 300 
Pasadena, CA 91101, Fax 
(626) 817-8582 or Email to 
Careers@PAHeaith.com. EOE 
M/F 


Web/Database Application Dev- 
eioper wanted by Dot Marketing 
Inc. in Miami to be active in 
idvipmt, deployment & mainte- 
nance of database/web applics 
These applics will be dvipd in 
Java & conform to J2EE stds. 
Individual must be versed in 
variety of web based technolo- 
gies, such as HTML, Javascript 
DHTML. In addition, individual 
must have strong know! of 
Applic Servers, Web Servers & 
scripting langs. D/base dsgn & 
admin exp a must. Must have 
min Comp Engg Bach deg & 2 
yrs exp. Comp salary offd. Mail 
resume to: Tim Brigham, 2424 
S. Dixie Hwy, Ste 200, Miami, FL 
33133 
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Senior Database Administrator 
to serve as a technical re: 
to perform functional a 
projec’ of complex s 
analy Jesigning, im 
ting, and maintaining acle 
database projects. Will architect 
logical and 
database 
ing and p 
upgrade r database reieases 
d versions, and maintain deci 
sion support system. Will per 
form physical sizing with data- 
base to manage data warehous- 
ing processes. Will develo 
design applications with n 
direction and rform code and 
unit testing for complex scope 
modules. Will work on multiple 
platforms to create project plans 
and implement moder: 
Projects. ill perform indepen- 
dent technical analysis, maintain 
external/user group relation- 
ships, manage vendor relation- 
ships, and work directly with the 
user community for project defi- 
nition. Will initiate project discus- 
sions and demonstrations with 
users or external groups, bring- 
ing issues to resolution. Will aiso 
provide application support for 
appropriate platforms. Will trou- 
bieshoot and perform testing) 
QA, and assist in planning and 
conducting user acceptance 
testing. Will provide technical 
guidance and training to associ 
ate and software engineer mem- 
bers of team. Requires Bachel- 
ors or equivalent in Computer 
Science, Engineering, Math, or 
Physics and three (3) years in 
job offered OR three (3) years 
experience in client/server de- 
velopment. Candidate must also 
possess demonstrated expertise 
in Oracle database administra- 
tion; demonstrated expertise 
developing data warehousing 
applications using informatica 
and PL/SQL; and demonstrated 
expertise writing UNIX shell 
scriptings and stored proce- 
dures. Salary: $75,236/yr, M-F 
9AMS5PM. Send 2 resumes to 
Case #200300575, Labor Ex- 
change Office, 19 Staniford St 
1st fl., Boston, MA 02114. EOE 
Applicants must be workers eli: 
gibie to accept full-time employ- 
ment in U.S 
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A position is available for a De- 
veloper in Atianta, Georgia with 
a travel technology company. 
The Developer will be primarily 
responsible for creating and 
maintaining software applica- 
tions in travel technology indus- 
try. Specific responsibilities in- 
clude gathering requirements, 
analyzing technical alternatives. 
designing, documenting, and 
implementing web tased appli- 
cations. Candidat:s for this po- 
sition should possess a Bachel- 
or's degree in Computer Sci- 
ence, Engineering or a related 
field and at least 1 year's experi- 
ence in travel technology includ- 
ing Weblogic, web applications. 
SQL, JAVA and database con- 
nectivity. Apply by mail to: Tom 
Barker, TRX, Inc., 6 West Druid 
Hills Drive, Atlanta, Georgia 
30329 


Computer Professionals: Pixel 
Systems Inc. a leading iT Con- 
sulting firm headquartered in 
Raleigh, N.C., is looking for top- 
notch professionals w/consulting 
exp. in the following areas or a 
combination thereof: Windows 
2000/XP, Visual Basic, ASP, 
ASP.Net, HTML, MS Access. 
SQL Server, Oracle, VB/Java 
Scripts, XML, Java, J2EE 
VB.Net, Win Runner, Load 
Runner, QTP. We offer compet- 
itive salaries & benefits. Re- 
quires Master's/Bachelor's de- 
gree w/1 to 5 yrs. of profession: 
al exp. Must be willing to travel 
to client sites throughout the 
U.S. Please mail/email resume: 
to: 3105 Benton Circle, Raleigh 
NC 27615, Attn: Mr. Trin or 
pixelsystemsresumes@yahoo 
com 


Manager of Software 
Engineering 
National software co. seeks 
software eng manager for 
its Reston, VA office. Suc- 
cessful candidate will man- 


t: Cogent Sys- 
tems, Inc. (626) 799-9639, 
Attn: HR 


Computer Systems Analyst 
Designs, develops and 
maintains large scale, multi- 
user enterprise data man- 
agement applications using 
GUPTA SQL Windows, 1.5 
or higher. Must have BS in 
Computer Science or equiv- 
alent discipline, plus at least 
two years experience in job 
offered. Send resume to 
CuraScript Pharmacy, 6272 
Lee Vista Blvd., Orlando, 
FL 32822, Attn. D. Meffe 


ATTENTION: 
Ray 
ee le) 
RSet Wate ard 
Place your 
Labor Certification 
ads here! 


ether a 
that will 


ma uming 
task a little easier. 


Contact: Danieile Tetreault at: 
800-762- 2977 
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Online Security 


something that our customers 
needed to make them feel 
comfortable about doing 
e-commerce,” he said. 

Increasingly, companies are 
being pushed to implement 
measures to rebuild consumer 
trust in the face of continued 
online attacks, said Robert 
Garigue, chief information se- 
curity officer at the Bank of 
Montreal in Toronto. 

“There’s a lot of pressure to 
respond,” said Garigue. “What 
we are seeing here is the issue 
of risk evolving from an inter- 
nal technical concern to a 
trust-relationship issue.” 

In a poll of about 5,600 
households conducted in De- 
cember by Forrester Research 
Inc., 26% of the online con- 
sumers said e-mail fraud con- 
cerns had stopped them from 
applying for a financial prod- 


Continued from page I 


Tape Mishap 


said Bo Coughlin, vice presi- 
dent of the commercial ser- 
vices division at Time Warner 
Cable in Stamford, Conn. “I 
don’t want Johnny to give a 
tape to Stevie, who then gives 
it to Paul, who puts it in his 
truck to transport it.” 

Coughlin is overseeing a 
project to offer subscribers a 
fully managed, WAN-based 
backup system to a central 
repository run by Arsenal Dig- 
ital Solutions Worldwide Inc. 
in Cary, N.C. The company is 
also testing the Arsenal sys- 
tem for internal use, he said. 

Coincidentally, Coughlin 
said he recently received a let- 
ter from Charlotte, N.C.-based 
Bank of America warning him 
that his personal account in- 
formation may have been 
compromised. 

Bank of America said it no- 
tified the U.S. Department of 
Defense and the General Ser- 








uct, while 14% said they had 
quit accessing accounts or 
paying bills online. Another 
20% said they don’t open 
e-mail that looks like it came 
from their financial institu- 
tions because of worries about 
phishing attacks. 

Such consumer angst is 
forcing companies to consider 
new identity, usage, service 
and privacy assurance mea- 
sures, said Jonathan Penn, au- 
thor of the Forrester report. 

Some have already taken ac- 
tion. Since last fall, America 
Online Inc. has offered its cus- 
tomers two-factor authentica- 
tion based on token technolo- 
gy from RSA Security Inc. 
AOL is also offering antivirus, 
firewall and antispyware tools 
without charge to subscribers, 
a spokesman said. 

Similarly, to help protect its 
customers against phishers, 
eBay Inc. is using Austin- 
based WholeSecurity Inc.’s 
Web Caller-ID technology to 


vices Administration on Feb. 
26 that “a few” tapes contain- 
ing account information for 
customers of the GSA’s Smart- 
Pay travel cards were miss- 
ing. Bank of America spokes- 
woman Alex Trower said the 
tapes were part of a larger 
shipment of media being sent 
to a backup data center. She 
wouldn’t say if the tapes were 
stolen or whether the data was 
encrypted. 


Turning to Technology 
Bank of America isn’t alone. 
Richard Fischer, an attorney 
at San Francisco-based Morri- 
son & Foerster LLP, devotes 
most of his time to financial 
privacy issues. He said that in 
the past three weeks, he has 
dealt with six cases involving 
banks whose customer infor- 
mation was compromised. 
“Without any question, the 
banks have been under the mi- 
croscope [of regulators] and 
have improved the security of 
systems,” he said. “The prob- 
lem is, the bad guys keep get- 








Paying the Price 


A lack of online 
security can: 
® Slow adoption of online 


let users verify the authentici- 
ty of a Web site via a down- 
loadable browser plug-in. 

The Stanford Federal Credit 


ed technology from Passmark 
Security Inc. in Redwood City, 
Calif., that proves to cus- 
tomers that they have logged 


| onto the SFCU Web site and 


not a fraudulent site. 
All customers are provided 


ting better too. The only solu- 
tion is more technology.” 

Paul Rivard, director of IT 
at Commerce Bancorp Inc., a 
$1.2 billion company in Cherry 
Hill, NJ., said he moved away 
from tape backup for most of 
his servers three years ago and 
began backup over a WAN 
using third-party service pro- 
vider AmeriVault Corp. in 
Waltham, Mass. 

“We don’t have to track all 
these tapes coming from 
branches to a central loca- 
tion,” Rivard said. “Not only is 
there greater peace of mind, 
but we don’t have the regula- 
tors ... and we don’t have to 
account for tapes in transit, the 
couriers and missed pickups.” 

Rivard said he believes that 
tape backup won't fully go 
away anytime soon because 
of the need for long-term 
archiving but that banks need 


to take advantage of better 


methods of securing that data. 
For example, Rivard began 
encrypting data on his tapes 
four years ago at the sugges- 





with a secret image and phrase 
that are displayed during the 

log-on process and throughout 
the entire transaction. The im- 


| ages — unique to each cus- 


tomer — confirm the authen- 
ticity of the site, said Sam Tuo- 
hey, chief technology officer at 
Palo Alto, Calif.-based SFCU. 
U.S. banks and other finan- 


| cial services companies have 


traditionally been reluctant to 
implement new security mea- 
sures for fear of driving cus- 
tomers away, said Avivah 
Litan, an analyst at Gartner 
Inc. Cost has been another 
concern, she added. 

But that may change as con- 
sumers demand stronger pro- 


| tection from their financial 
Union (SFCU) has implement- | 


services firms, Litan said. 

In an April 2004 Gartner 
survey of 5,000 U.S. con- 
sumers, 60% of the respon- 
dents said they wanted the op- 
tion of using additional securi- 
ty mechanisms for online 
transactions, while 19% said 


tion of a private auditor. 

Bill Bradway, an analyst at 
IDC’s Financial Insights unit 
in Framingham, Mass., pre- 
dicted that Bank of America 
will likely put together a team 
that includes its C{O, chief se- 
curity officer and chief risk of- 
ficer to strengthen processes 
and procedures for ensuring 
that backup data is safe. The 
bank will likely move toward 
transmitting backup data 
through high-bandwidth net- 
works without the use of 
tapes, he said. 


Regulatory Backlash 


In the meantime, Bradway 
said, companies should brace 
for the regulatory backlash. 
Last week, Senate Banking 
Committee member Jon 
Corzine (D-N_J.) said he called 
on Committee Chairman 
Richard Shelby (R-Ala.) and 
ranking member Paul Sar- 
banes (D-Md.) to hold hear- 
ings on the issue of identity 
theft as soon as possible. 
Corzine has for the past two 





they wanted added protection 
as a condition of doing busi- 
ness with a company. 

In light of that, Gartner pre- 
dicts that by the end of 2007, 
up to 75% of U.S. banks will 
use an authentication method 
that’s stronger than a simple 


| password. Through the same 


period, up to 7% of U.S. banks 


| and 70% worldwide will be 


mandating the use of hardware 
tokens for customer authenti- 
cation, the report predicted. 
“This notion of balancing 
security with convenience is 


| an absolutely valid idea, but it 


needs to be revisited,” Penn 
said. He added that security 


is a much bigger issue now” 


than it was before. @ 52974 


RETAILERS TRY HARDER 


Well-publicized identity theft and data- 


| loss incidents are forcing online retailers 
| to invest in back-end tools to curb the 


cost of fraud 


QuickLink 52975 
www.computerworld.com 


years introduced a measure 
that would require companies 
to notify the public when sen- 
sitive data is compromised. 

A spokesman for Corzine 
said the proposed Privacy 
Breach Notification Act ad- 


| dresses the lack of notification 


for “individuals who may have 


| been affected by ChoicePoint 


and Bank of America.” 

Bank of America’s Trower 
said that the missing packages 
and the tapes were “unidenti- 
fiable” and that there was 
nothing on the packages to in- 
dicate who they belonged to 
or where they were going. 

“It would require highly so- 
phisticated hardware and soft- 
ware and specific user infor- 
mation to access the data on 
the tapes,” she said. 

Trower wouldn't say if the 
tapes were being handled by a 
third-party archival service or 
whether Bank of America is 
considering changing its pro- 
cedures for backing up data 
from physical tapes to high- 
speed data networks. @ 52928 
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E-health, Stat! 


ETTING THE RECORD STRAIGHT: Ray Noorda probably 
has Alzheimer’s. I discounted rumors to that effect when 

I wrote my column on Noorda’s lawsuit to regain control 
of The Canopy Group, the investment company he found- 
ed [QuickLink 52364]. But in a recent court filing, Noorda’s 


own lawyers refer to “the apparent onset of Alzheimer’s disease.” No | 


word on how much the disease has affected Noorda, but his medical 
records have been demanded by the other side in the lawsuit. 
What will they get? Most likely, a pile of paper. 


Paper is still the common currency of med- 
ical records. Sure, hospitals have been buying 
technology for what are now called electronic 
health records (EHR) for more than a decade. 
EHR is a priority for Dr. David J. Brailer, the 
new national coordinator for health informa- 
tion technology. There are even well-funded 
multiorganization EHR pilot projects — one in 
Massachusetts gets rolling this month. 

So why will paper remain king for another 
decade or more, according to analysts? 

The usual reasons given are cost, user resis- 
tance and lack of interoperability. But those ex- 
cuses don’t wash. 

Cost? Estimates for implementing EHRs top 
out at $12 billion per year. That’s about $40 per 
American — less than $4 per month. That’s no 
showstopper. 

User resistance? Lots of doctors and nurses 
say they don’t like the idea of more computers 
getting in the way. But once they actually see 
test results faster, read patient notes that aren’t 
incomprehensibly scribbled and never have to 
wonder what’s missing from a file, they almost 
always fall in love with the new systems. 

Lack of interoperability? True, EHR vendors 


aren’t big on connecting with their competitors’ 


offerings. But interoperability is no black art. 
This isn’t a technology issue. When 
customers — or government regu- 

lators — demand interoperability, 

we'll get it. 

So what’s the real problem? Iner- 
tia. There’s no reason for urgency, 
nothing forcing health care players 
to move fast on EHR. Which is why 
we could spend the next decade 
watching EHR pilot projects tenta- 
tively trying different approaches to 
see what sort of EHR might work, 
while the rest of us remain neck- 
deep in paper medical records. 

Or we could do what we already 





know works — and get there a lot faster. 

What would that take? A Ford. Or a Sears. 
Or a Wal-Mart. 

Back in the 1980s, Ford and Sears forced their 
suppliers to adopt electronic data interchange 
— and EDI took off. Twenty years later, Wal- 
Mart used the same threat with suppliers about 
RFID: Adopt this technology, or we won’t buy 
from you. Now RFID is flying. 

Until some big player cracks the whip, every- 
one just shuffles around with a new technology. 
Once the whip cracks, everyone falls into line. 
True for EDI and RFID — and true for EHR. 

Big whip-cracking players also define imple- 
mentations. Not architectures, not standards — 
implementations. If it doesn’t work with the 
whip-cracker’s version of EDI or RFID, it’s 
useless. Same for EHR. 

If we want to climb out of the paper pit fast, 
we need someone to crack the EHR whip. 

But who? Insurance companies could do it, 
but they won’t. They’d save on paper handling 
but lose their excuse for not making payments 
quickly. Hospitals and HMOs already have EHR 
systems, but none is big enough to force stan- 
dardization and interoperability. Big companies 
that pay for medical benefits are too far out of 
the loop to dictate technology. 

But one whip-cracker is big 
enough and central enough and 
controls enough money. It even has 
some new initiatives that EHR 
would fit perfectly. If anyone will 
make it happen fast, this player is 
the one who will do it. 

So keep an eye on those EHR 
pilots. They should be interesting 
for anyone who deals with medical 
records. Don’t be fooled, though; 
they’re still just shuffling around, 
surrounded by paper. 

But when Medicare cracks the 
whip, then we'll get EHR. @ 52932 
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Who Loves You, Baby? 

This pilot fish is interviewing job candidates, and one 
of his favorite questions for understanding how people 
handle crisis situations is, “Tell me about your worst 
day.” But when he asks one job seeker, the response 
is, “Three words: | love you.” Says fish, “I turned to the 
HR staffer sitting on interviews with me and explained 
that ‘I love you’ was the name of a computer virus. She 
was relieved that this interviewee had, in fact, not just 
proclaimed his love for me.” 

Wrong! Hard 

to send an End user calls 
e-mailtothis — TANK ma the help desk 
guy,” user com- with a PC 
plains, “and it keeps : problem, and the tech’s 
domain doesn't have any : doesn’t seem to help. 
such e-mail address. But : “Finally, as a last resort, 
| know it’s right.” Pilot _ : the tech tells the user to 
fish suggests user call to : ‘hard boot’ the system,” 
verify the address, and a : says a pilot fish on the 
few minutes later, irate : scene. “Confused, the 
user has conferenced in : user asks, ‘What's a 
the would-be recipient. : hard boot?’ The tech 
Fish asks him to spell: says, ‘Push in on the 
out his e-mail address. | CPU's power button 
But halfway through, —_; ‘really hard and then re- 
user interrupts: “No, ——. 
wait - that’s not how eae 


you spell it!” 

Get the Hint? pein 
Pilot fish receives online : application is rolled out, 
survey for evaluating his: this user sees a message 
team and his new boss. ! pop up on his screen: 
“We were assured that : We are dead. We are all 
the results were anony- : dead. “The user created 
mous, even though we —_: a screen print and hand- 
were to send the survey | ed it to his manager, 
back to our boss via : who immediately esca- 
€-mail,” grumbles fish. lated tt the socurty 
“To add insult to injury, —— 
when | opened the sur- 

vey, | found two ques- 


tions 


already answered. — 
The first one, ‘feel the 


team gets 
woll,’ was marked ‘in- 
clined to disagree.’ The _ 
second one was, ‘I feel 
the manager has the 
knowledge and drive to 
lead the team to suc- 





What would 


you do with a 
10,000 CPU grid? 


- Pay $1 to find out. 


Cd 


Introducing the Sun Grid for $1/cpu-hr. 
The network is your computer. 


If you’re paying more than $1/cpwrhr to build and run your own grid, you’re overpaying. Because that’s the price at whict 


our grid is available to you. Pay $1/cpu-hr, and leverage our capital spend, SPARC® or x86 computers, Flare) Th & Sun 


to run your business, From Monte Carlo simulations to reservoir simulation. Protein modeling to movie rendering. 1 cpu to microsystems 
The Network is the Computer 


as many as you could conceive. No minimum commitment, no maximum. Stretch your 
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Oracle Grid 


All Your Databases 


In a Grid 


VY No wasted capacity 


VY No wasted money 


vY No single point of failure 


Oracle Grid 
It’s fast... it’s cheap... 
and it never breaks 


ORACLE 


oracle.com/grid 
or call 1.800.633.0753 


Note: ‘Never breaks’ indicates that when a server goes down, your system keeps on running 
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